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FBI PRIVACY THRESHOLD ANALYSIS (FTA) 

NAME OF S YSTEM: HumRRQ FBI SBC Laptops System 

For efBcieney, a system owner or program manager can be aided In making the- determination of whether a 
Privacy Impact Assessment (PIA) is recoiled by conducting and following Privacy Threshold Analysis (P t A). 

A PTA contains basic questions about the nature of the system in addition to a basic system description. The 
questions are ns follows: 

A, General System Descriptiont The Human Resources Research Organisation fMomRRO) FBI 
Sensitive Bui Unclassified (SBU) Laptop System processes For Official Use Only CEOUO), $8lq and Lass 
Enforcement Sensitive (LES) information. 

L Type of Information in the system; Nompersonaliy Identifiable information consisting of minutes 
from contractor-held locos group meetings with FBI employees who are Subject Matter Experts {SMEsj 
regarding the tasks performed nod the knowledge* skills and abilities required in their area of 
specialisation, Information generated from the analysis of the results of those meetings, and information 
related to the preparation of reports to the FBI by HumRRO as deliverables under the contracts. The 
currently identified contract task orders to he supported by this system are: FBI Joh Analysis |JA) - 
Special Agents - focuses on eonnterintelllgeoce, eoniiterterrorlsm. Intelligence* cyber and criminal 
divisions, and FBI JA - Intelligence Career Service (ICS)«focuses on intelligence analysts* language 
analysts, surveillance specialists. 

a. If toe system Is solely related to internal government operations please provide » brief explanation of 
the quantity ami type of etaployee/eootractor information: N/A 

2, Purpose for collecting the information and how it will bo used: The HuuiRRO contracts (OEM 
Project Codes: 02EA3TS2U and II2EA3TS2S1} provide analysis of multiple job series. The purpose of 
this analysis Is to defcrmlne- program-specific competencies and their associated developmental 
opportunities, Ikogram-speclfle competencies reflect specialised knowledge* skills or abilities that are 
required to perform the critical job tasks. Ear each program-specific competency developed, IlmoRRO 
mast identify proficiency levels, measurahlc behavioral indicators and related development 
opportunities. This system is used to record minutes from locus groups, analyse the recorded 
information, and prepare reports for the FBI. The goal is to describe what personnel In various Internal 
FBI departments do and how they do it In order to Improve training. Each task addresses a different 
focus group, In addition, the data gathered from the questionnaires will he analysed by a statistical 
software' package to facilitate the identification of the important tasks and knowiedge^kiils*and>ahllitles 
<KSAs)> Finally, this information system will he used to produce various deliverables associated with the 
generation of the tasks, ICSAs, and then ultimately competencies. These deliverables include lists, as well 
as the final report. 


3. The syslemh structure (including comt>onents/suhsvstems): f 
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FBI PRIVACY THRESHOLD ANALYSIS (FT.4) 

NAME OF SYSTEM: HuraRRO FBI SBU Laptops System 


4, Means of accessing the system and transmitting information to and from (he system: AM users are 
authorized system access Based on a minimum of a Secret security clearance or .Limited Background 
Investigation (LB1), The uncleared users are specifically authorised to access the system Based on an LB.I 
conducted by the FBI Security Di vision. The system owner or program manager determine oeeddo-hnow 
and authorize specific HumRRO personnel for SBU Laptop system accounts. Each person authorized to 
access this information system Is Briefed on their system responsibilities and has agreed to the user rules 
Of Behavior for this system. The ISSO retains signed acknowledgement forms for each authorized 
person. Each person has a unique login to the information system. Upon change in access or 
termination, the sued fled user's login will he disabled,_ 










FBI PRIVACY THRESHOLD ANALYSIS (FTA) 

NAME OF SYSTEM; HiuisRBO FBI SBC Laptops System 

By 1C dated 03/07/2007, file/seria! number 3I9l!"HQ-Ai4S7F77~SIOFS23, a separate system, the 
IfomMRO FBI Classified Laptop System, received Approval to Operate (ATO), A 
SBU Laptops System m pending, and expected In due course. 

HumRRO has Been awarded a fad! 


taa been approved for dosed 


storage safeguarding of Secret material. The assumption Is made that BurnRRO will maintain* as a rivuumum, 
the Secret facility clearance and safeguarding approval throughout the period of performance. Failure on 
HunxRRCTs part to maintain this minimum level of facility clearance and safeguarding will result in the 
recovery by the FBI of all material, entrusted to HumRRO to include the HumRRO FBI SBU Laptop system 
hard drives, printouts, and other system media containing FBI data (e.g, system backups, deliverables, reference 
material and work in progress information). 


I. Is this system encompassed within an OMB-300? _Yes 


X No 


Don't Know 


April 17,20037 
YES (If “yes/’ proceed to Question L> 

X NO (If “m* proceed to Section !L) 

f. Has the system undergone any signiffeant changes since April 17,2003? 
.YES if “yesr please explain the nature of those changes: 


sue to Quesnon u. ) 


_NO (If "no," the PTA is complete and should be sent to FBI OOCs Privacy and Civil Liberties Unit 

(PCLU) for review, approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unless yon are 
otherwise advised, no PIA is required,) 

2, Do the changes involve the collection, maintenance, or dissemination of information in identifiable form 
about individuals? 

_YES (If "yes;’ please proceed to Question 3.) 

..NO (If "no," the PTA is complete and should be sent to FBI OOCs Privacy and Civil Liberties Unit 

(PCLU) for review, approval, and forwarding to DOi's- Privacy and Civil Liberties Office. Unless you are 
otherwise advised, no PIA is required.) 

3. Is the system solely related to internal government operations? 


Y MS 

If 

s a Major Inf carnation System (as listed on OOCs FBfNET vs 

'shake}?: 


Yes. 

(If ’yes," a full FI A is j 

PTA is complete.) 



. ..No. 

(If "nof ’ the PTA is complete and 

should be sent to FBI. CK 

3Cs Privacy 


i 
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NAME OF SYSTEM: 


Liberties Unit (PCLtJj for review, approval, and torwarbmg te IX)I s Prtygcy aac Ctytt 
Liberties Office. Unless you are otherwise advised, no PIA is required. (FBI and DO) 
reviewing officials reserve the right to require a PIA,)) 

NO (If “no,” go to section HI to determine if a Mi or short-form PIA is required,) 


II. For systems developed after April 1?» 2003, 

L What is the purpose of the system? (A os war la detail unless details already provided fa A. 2 above): 


Sea .above. 


See Question A.2, srrpm 


(Conti one to Question 2.) 

2. Does the system collect, maintain or disseminate Information in identifiable torn) about individual 


YES (If “yes,” please proceed to Question 3.) 

X....NO (HWioT the FT A is complete and should be seat to FBI OGC's Privacy end Civil 
Liberties Unit (PCLXJ) for review, approval, nod forwarding to 1)0J A Privacy end Ova 
Liberties Office. Unless yon are otherwise advised, no PM Is required.) 


3. is the system solely related to internal government operatkms? 


YES if "yes," Is this a Mafor Information System (as listed on GOC's FBINBT website)?: 


_Yes. (If “yes," a full PIA Is required.. PTA is complete,) 


No. (if “no, “the PTA k complete and should be sent to FBIQGCs Privacy 

and Civil Liberties Unit (FCLU) for review, approval, and forwarding to DOJ's Privacy 
and Civil Liberties Office. Unless you are otherwise advised, no PIA is required. (FBI 
and DO) reviewing officials reserve the right to require a PJA.)) 

JNQ (If “no,” go to section III to determine if a full or shoft-form PIA is required.) 


Ilf, Full -or Short-Form PIA 

L Is the system a major information system (as listed on 0GC$ FBINBT website)? 


YES (If “yes,” a full PIA is required. PTA is complete.) 


..NO (If “no.” please continue to question 2.) 


2. Does the system involve routine Information AND have limited nse/access? 
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BEFEIM IS UNCLASSIFIED EXCEPT 
WHERE SHOWN OTHERWISE 



CLASSIFIED EY HSICC/C 32 AS 3251 
REASON: 1.4 (C) 

DECLASSIFY CHETt 11 - 04-2035 
DATE: 11 - 04-2014 


TCGG/lAAM Bier. .MlSdGO \W). 


FBI PRIV ACY 111 RES I IO 

NAME OF SYSTEM. IPHO-IFCT: 


MKR FBI FEND IN G 


!"" | SVSTEM/FROJECfpIX: 

FBI 0G C/FCLL PCB 

EH j 

! i Name: | 

| ! FfOpam OPRc: Access Ccnti'N 

1 1 Divkios: SccuRA 

l Phone: 

| 1 Room Number: 13SV JFR 

Name: 

Phase 


Room 

Number: I3ST J 

FBI DIVISION INTEEMFIRATE APPROVALS 

| B-ogran* Manager Cor pdler: appropriate j Division Pi 

w&cy F 

iffeer 


I executive na Oivi&ion detern?0he$vA A r 





Program Mvisiom 
Access Coded 


FB1MQ BivssFm: 
See m s ty O ivisiou 


Ode «• gtlM: 'Wff*.* 
Ms r «'<'T ^ 

vV<>}.tjv . I 


| Signalise: 

| Dale signed: 


i Nsmc:|_ 


y 



I Ixbhte:: Colleen 


| foie; Section Gfnei 


i idle: &'s<-Ajaat ^ 1 

| Signature: 

| liamoj 


■v-v-l A-f >. 


! Title: A ss fst&ftt. 'General Con m&\ 
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FINAL FBI APPROVAL / BETERMINATIONS / CONDITIONS: 


_FIA is required by the E-Goverxirnent Act.. 

. ... lit . Ml&lg'te be completed as a BrnttgrBClEKCK^MI^eiSiSR.: 

Is FIA to be published ott FBi.GOV (aibm my ROD FOIA redactions)? .. Yes. X. No: 

This h a national security system, it will not fee published m fbi.gov. 

FIA mmi reqdimi 

System 4sm, not collect maintain, m disseminate PI1. 

__-System is grandfathered (in existence before #11/2003; no infer changes posing sign 

_lolptmatlon In (he system rsisOsOo Memst government operations.. 

,_System has beer., previously assessed under sm evaluation similar to a FIA. 

No significant privacy issues (or privacy issues are unchanged). 

Other: 


it privacy nsas 


j Applicable SORN(s): Security Acces s Control Sys tem (SACS), DOi /P BI-Ol a and Itsfclllpocc Coamm mty Seen? 
I Clearance ami Access Approval Repositorv,. GONE1.2 


Noilly FBI 8MIMGDS per MIOG 190.2 J?_No A..VeV'~Sec sample EC op FQ.I1 intomet website here: 

ht:p:/:Aoo'se/O(3/OOOA/rB/fX'l.ll/l > tlva£yQvilbS20Llbmtlo|%2FI.ibn!ry/lbon.for juiog 1.99*2-3. ce,Apd 

SORN/SORK reOsion(s) required? X No Yes: 













































St 



1, INFORM ATION ABOUT THE 



L Proekle & of the system or project that mdtU'te.j (a) name of 

the ,wMe?n/|>r<>ject t fadmlfag $$£&dsttcd acnmynM? {$$ ^raetare of the 
§y^iem/pro:jeet ? mdudhtg b3t^rmmtiAU§m with other pro|eO$ w wsRsnsc <e) 

p) iiotore of fat fafhrm aiioa fa tlvo ^ptowprojoO 


ami bow it will be astd; (e> who will hove across to thefafonoatfao fa the 
system/projteU (f) ami the maooer of tr&Mralssfatt M ail .users* 
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;..-k xv-x< v.-i .{xhwM'Wxv o'j.«vvx>.>v >.ctxcj. t.: 


Ifv (>y marked a ay of the above, proceed So Question. 4, 


None of the above. if pone of the above, describe why the information does not 
identify specific individuals either directly or indirectly. 


4. Does the system/prpject pertain only to government employees, contractor or 
consultants? 


NO 


X fii 


b. Is information, about United States citizens or lawfully admitted permanent resident 
aliens retrieved from the system/proieet by name or other personal identifier? 
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NO. flf on, skip fo t|pesfopt % 

% YES- |1C yes, proceed to the nmi question, j 

A, Does tide system/project collect my information directly irons, the: person who is the 
subject of the intbnrrab on? 

_NO [If no, proceed to question ?,j 

X YES 


a. Does the system/project support crintitsak CT„ or PCI investigatiot.es or 
assessments? 

X NO 


YES flf yes, proceed to question 


b, Are subjects of Informtuiati from. whom the information is directly collected: 
provided a written Privacy Act (e)(3) statement (either on the collection. form, or via a 
separate notice!? 


HO jThe program wifi need to work w 
the necessary 


U to deveion/implemeof 


X YES identify any Corns, paper or electronic, used to reqnesi such 
information front the information suhiect: 


ana 


Privacy Act (c)(3) statements are costed In the ¥1 soars Center, the Escort Desk, 


7. Are Social Security Numbers (SSNs) collected, maintained, or disseminated iforn the 
system/project? Full SSNs should only be used as idcntiiicts in limited instances. 


MC> 


X YES If yea, cheek, all that apply: 


. .. M SSNs -are necessary to establisfoconftrm the identity of subjects, victims, 
witnesses or sources in this tasv enforcement or intelligence activity. 


X SSNs. are necessary to identify FBI personnel in this Interna! aduriaistratfoe 
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. . SSHs. are Important tor other reasons, Describe; 

X The system/pmject provides special protection to SBN’s fmg» SSMs are 
enervated, Middda from all -users via a look-un table, or only available to cen&in 




I 


It is not feasible for the svstem/proiem to provide special protection to 


SSMs, 


is the system. operated by a cent factor? 


X Mo. 


. Yes, Information systems operated by contractors for the FBI .may he 

considered Privacy Act systems of records. The Federal Acquisition Regulation 
contains standard contract clauses that must be Included in the event the system 
■collects* maintains or disseminates Pi t and additional requirements may be 
imposed as a matter trf Department of Justice policy, CYmsuitations with the 
Office of the General Counsel may be required if a contractor k opera ting: the 
system for the FBI. 


Has the system undergone Certification «&. Accreditation t£$k A) by rite FBI 

Security Division (SecP)? 


Mtl: 


If nm indicate reason; if CM A Is pending, provide anrietfnued 


X YES If yes, please indicate the following,, If known: 

Provide date of fast C& A cert i ficution/re-eertif katiun: 
December 2,. 21110 

Confldeoriailttc Lory Moderate X High I In defined 

I o iegrlty: _ _Low _X Moder a he High U ndeioed 

Availability; JX Low_Moderate_High Undefined 

__Hot applicable - this; system is only paper-based. 

Is tins system;project the subject of an QMB-3B0 budget submission? 

X NO 
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if yes, please provide the bate hod mmse or 
title of the OMB submission; 



YES If yes. indicate which of the following changes were ln.vd.eed (murk all 
dotages that apply, and provide brief explanation for each marked changer 


ft cOhvefstPnrfmm papef foaseb records to an electronic system. 


A change from information In a f© 
demiliable to a format that Is identifiable i 


tmrni. that Is anonymous or non 
topaftlccdar IMMduals.. 


__A new use of an IT sysfcm/prpjeet iodudmg application. of a now 

technology, that changes how information in identifiable form Is managed. 
(For example, a change that would create a more open, environment and/or 
avenue for exposure of data that previously did not exist.) 
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A m {y^y.v^vx^j y c \: ; < **x .< rt&rcnr***mmY' 

.-. i. V: > s Mi .^v Vxxi-Mv 1 >*• ^ v.1 >.i ^ i x 1 > \> 5 i :i^«-1 \o x> .fovi i U w a J v v .v ivvV'vV \ V x xvi- v-'Vv- o 

^f'T i * £ad V ^Ttt f <i i l?%<\ ?>f ? il o i v h vd vV d K O t h v T S 


A new .method of authenticating the use of and access to 
tformation in identifiable fbm bv members of the mshlic. 


A. systernaiic menrporSdon oiotoiobnses.ot mtdrmnboo u 


identifiable form purchased or obtained mom. commercial or public sources. 

___ A new interagency use or shared agency fonefiou that results in 
new uses or exchanges of information In. identifiable form. 

__ A change that results in a new use or disclosure of information in 

identifiable form. 

A change that resnlfs in new items of information In identifiable 
form being added. Into the svstem/ptxbecf 


{ C h-$m<yjA'C: •?$ Y'l'Y’Y Y'y> m j hv- V*Yf 

... .,_ . \. >.\vyv.^V.«.> \}\.' KVv yAi.VvJVv V-S VI vi-vi v^\. kit t:OV v> -{-..'V V> X X v: VV V V+O S > Sve.vS iSs-Ns >.vV\v 

w individuals on whom records are maintained, or the use or 
issemination of information .from the sysiem/omieef 


Other pAwihte brief explanafiopjt 
ms a PI A for this sYsrem/nroieet already exist? 


Provide (i ate/title of the PI A: 


ms me system/ 


x v 5 i? ** $$• V <i*^ f v> s 5 > r<>\ ^ j> t *■ 

Ws.vmVs W.' J.vV Vv) J V V>.\ ,V V V Ja A *V \>V> A V V ^v^vi^sV>A ^ Xv Vv vV ^ Xv V • 
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cover sheet is mcmmwwMmm official ose only wens detached from fia 

(€KjC/FCLO (Rev, OF/ON2P U>) 


(Equivalent to the .DOJ Mftal Privacy Assessment (IPA)) 


HAM! OP SYSTEM / PROJECT? 
* Asset IB 
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N/A 


FBI INTO, 

CLASSIFIED BY NSICG/C32W33B91 
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FBI. FIM 


, lYEOEMAXffTS ABOUT THE SYSTEM / FMMECX 


L Frwiie a ge&ers*l deserlplioa of fe e system or project fiat fedmless la! mmw of 
fee system^wojeet, mefedfeg Mfeeiatei mmmmm -(b) straefere of ifes 

Esclsisisg lssOr« 0 »aaaR«as wife ofeer projects erspte»; (ej 
purpose of fee srBeot/proJeet; td| itafere of the mimmmtmn ia fee systerntprojeet 
aotl Sow It will he osed; (e| w ho wilt hare eeeess to fee mformoitoa Is fee 
systeot/projecR flf ami the moaner of traosofesom to oil osers. 
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FBIPTA 
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.X YES 


ttii® 


'5 pt nn^ v\\\ N r\< r<^ rv5: ^-' >:<>•<n: ;n*':$•$•>£> 5Ni* hi^^ S^YjaIv * i'Y tH< N tHi x 

,.S v .V :>.Sv>Jvv>x>- >.v;Usi j.V^xV ...tx vXi>..< v> t. \ >.*V .i \YF.i\<.* » i.tssw. V JlxVvtxVTv x x>> vxV ■i.XjxVjto.i jy \V l-xsvx i i Ml xi-> txV xs > i x : v\J : v 

system about individuals: Bear to mind. that logorn infntatatlon may Identify or be 
linkable to »indisidoal, 

(Cheek alt that apply.) 

.X The irdhrrrstooB directly identifies specific individuals. 


The information is intended to he used,, to eon|unelton with other data eleotenls, 
to indirectly Identify specific indkidnafs.. 


The totonnalion can. be used to distinguish or trace an individuate identity (ie,. 
Is linked or linkable to specific Jndrvfdnatef 


None of toe above, if none of the above, describe why the iniormatton does not 
Identify specific individuals either directly or indirectly. 


A Does the sytoeayprojeet pertain only to government employees, contractors, or 


oonsnltonts'f 


AC) 


FES 


:i> is iBlbrrnadon about finited States citizens or lawfully admitted permanem resident 

* v . :v: : . A . . .'-&■■ ., x . v . .. -: y . . v x .:•>■•... . . : x : :oy- v\ 

>:> y 5 <*v> c: \ s \^\ y»x ^x^ n^xcx \ s a\w y >x k »x v: >: ; <>x .%\ 'vx / \vs*w> %>/❖>• v>:*y >>:■ ’Zy^vx «‘N A\ v >\yx>* ne w;: ,'\ >x >x > v.*x .'X >\ >:•> y*;- 

> Sv^V;v V w v i v>xv ..*> };>w}vVt > svyi > 


X YES. 


no, sk.jp to pnesfioo V. 
t yes. 


6, Does the sytoernlproject collect any information directly front the person, who is the 
subject of the toionsation? 

X » 


vs 


a. Does the svstemtotoieet sunnort cntninal, CT, or FQ tovestitodions or 


assessments? 


NO 


YES |lf yes, proceed to ipestioo X 
















'til* 



M> |TI*e pmprsm wpi need to work with PCLtJ t# 

tt*e steesssarv- f»n»{04 


YES Identify my ferns, paper m (fcteak, «s«P i# respesi mek 
informal km fmm the information snbjeet? 


7. »%e Social Security Nambem (SSNs) collected, maintained or diksemi XA V*' V A *. A ' \ 

Full SSKs should only be used as kfmdfim m limited mstaBees.. 


NO j£ YES Iff ms efctck all that apply: 


1 SSNs are necessary to cslahllsikecBErnt the Identity of subjects, victims, 
tdinesses or sources In Ibis law cnEuceorcnt or ioMHacnce activity. 


SSNs are necessary to identify FBI net sound in this interna! admktistnuive 


system. 
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¥ES If ym> phme Imikat* feltowlag* If kmmm 


WrmMt 4&t* M feist Ofe4 




hi 
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FBI Fl'M 



YES If vesk: 


^ j .i5> vXii-uS -■>¥ AxC*viX.- v i,ivNv T? VA-:\.*v.tvb i> > xx+'v 1 ^sVvVi i 'IU^U v'A vt.vV- yJV v.}./ ; . 


bl 
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M: MO 


¥1S 


IMF 


13, Statue of System/ Protect: 


bl 
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_ % This Is « new system/ project hi devetopntenl. |I€ yon cheeked Has Black, 

STOP. Ike FT A Is now complete and after dmsioo approvalfs) should be 
submitted la FBI OCIC/FCLE for Baal FBI approval and determination If 
PI A and/or all 


II. EXISTING SYSTEMS / PROJECTS 


1:. When svhlihe system/prefect developed? 


^ t-T-'Vv' Mwv)j?« v f i m/^>x*y-}mS;w : ->:•: ci iv«>.k<;n<«>.*■ < s ^ ‘Y 

.w,. f. .$■> ^vV J yT: * Vv <• GtiTW*/>: i V V' C>Jt>iV-v •• V;A*>.: 


NO (if no, proceed to next question (13.3). \ 


YES If yes, indicate which of the tbllowmg changes were In vol ved (omek all 


A to an electronic svstem, 


A ehsnge Iroat trdurmaion to aformat that ss anonymous or non* 


identifiable to a format that, is identifiable to particular individuals. 

A .new use of an IT system/project, including application of a new 
technology, that changes how information in identifiable form is managed. 
(For example, a change that would create a more open environment' aad/dr 
axenne lor exposure of data that prevtomly did not exist .) 

_ A change that results In igfftmakon hi identifiable: form being 

merged, cemtalked, or mntehed with other databases. 

__ _ A now method of.authentkatmg- the use of and. access to 

information in identifiable form by members of the public. 
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FBIFi'A: 


_ A systematic incorporation of databases Gfmfsnrmtim il 

kiestti&Me firm potehased or obtained -fern commercial. or public mmtcm. 

__. A lew ihteagsicy use or shared agency function thm results in 

lew im or emihanees of isibrmatlon in Identifiable loom 


_ A change that remits m a new use or disclosure of information in 

kleniiO.abl e form. 


A change that resets in new Items of loibrntation i» identifiable 
.Coni beinn added into the svsienkoroieei 


__ Changes do not Involve a change in the type of records maintained., 

dissemination of Iiiortiililn from the svstemrproieei 


filter [Provide Brief evplnni Ilea 


i. Docs a IMA far this svstcm/nroiect alreadv exist'? 


a. Provide iMe/tiiJe of the PI A: 


: x. >•. , x . *•:. *•••.•>:.>:•. ... .•.*.... > > a .. v'..*• . . wv c ,* 

>>:<■>:< £ v'y ^.’N JV' ; \A\ S VV' C>:\y \ >^\AXv.\^vWViS jN -N W \p v> < A*r\ \ v. : Av'ivA** A>Nv‘i v> A WftvS ( ’< a; > >N .\v VA i VV 

.V |,v>\v : v* v .-»<}.vll.v' :pj.X^'VVv '^.xW-Vi- ^.\%V ^ Vi.t^Xw.Vo x^V .% 5./A ; 


[The PTA B now complete and alter division approval(a| aiwld be submitted in 
FBI GGCjTCIA; for Huai FBI approval and deieritinainn If FI A m&tm other 
actions are reottlredU 
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FBI Privacy Threshold Analysis (PTA) Cover Sheet (OGC/PCLU (Rev. 05/02/07) 


NAME OF SYSTEM: ISRA4 


Class! 

Reason 



riY: 


SYSTEM POC 

Name: 

Program Office: ITB 
Di vi si on: ITOD 

Phone_ 

Room Number: 1302 


FBI OGC/PCLU POC 

Name: I 


Phone: | 

Room Number:7338 


FBI DIVISION APPROVALS A PI A (ad/or PTA) should be prepared/approved by the cognizant program management in 

col laboration with IT, security, and end-user management and OGC/PCLU. (PI As/PTA s reiating to electronic forms/questionnai res implicati ng 

the Paperwork Reduction Act should also be coordinated with the RMD Forms Desk.) If the subject of a PTA/PIA is under the program 


cognizance of an FBI HQ Division, prior to forwarding to OGC the PTA/PIA must also be referred to the f-'BIHQ Division for program review and 
approval, if required by the FBI HQ Division. 



Program Division: RPO 

FBIHQDivisiondTOD 

Program Manager 

Signature: 

Signature: /s/ 

(or other appropriate 

Date signed: 

Date signed: 5/29/2008 

executive as Division 

Name 

Name 

determines) 

Title: Unit Chief, Resources Analysis Unit 

Title: Acting UC- FSU 

Division Privacy Officer 

Signature: 

Signature: /s/ 


Date signed: 

Date signed: 5/29/2008 


Name: 

Name 


Title: 

Title: Division Privacy Officer 


Upon Division approval forward signed hard copy plus electro 

FINAL FBI APPROVAL: 

nic copy io OGC/ 

'PCLU (JEH Room 7338), 

FBI Privacy and Civil Liberties Officer 

Signature: 

N 


Date Signed: 

6/26/2008 


Name: 

David C, Larson 


Title: 

Deputy General Counsel 


Upon final FBI approval, FBI OGC will distribute as follows: 

1 - Signed original to 190-HQ-C1321794 
Copies: 


1 - DOJ Privacy and Civil Liberties Office-Main Justice, Room 4259 
2-FBI ITB/OIPP 


1 - FBI SecD (electronic copy via e-mail) 

2*- Program Division POC/Privacy Officer 
2*- FBIHQDivision POC/Privacy Officer 

(*please reproduce as needed for Program/Division file(s)) 


1 - OGC\PCLU intranet website 
1 -PCLU UC 
1 - PCLU Library 
1-PCLU Tickler 


b6 
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b6 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: ISRAA 

For efficiency, a system owner or program manager can be aided in making the determination of whether a Privacy Impact Assessment 
(PIA) is required by conducting and following Privacy Threshold Analysis (PTA). 

Whether or not a PIA is required, the system owner/program manager should consult with the FBI Records Management Division (RMD) to 
identify and resolve any records issues relating to information in the system. 

A PTA contains basic questions about the nature of the system in addition to a basic system description. The questions are as follows: 

A. General System Description: Please briefly describe: 

1. Type of information in the system: 

ISRAA reposes Subject Names, Agent Names and to include all of the Agent Accomplishments to FBI Cases registered in 
ACS. 

a. If the system is solely related to internal government operations please provide a brief explanation of the quantity and type of 
employee/contractor information: 

N/A. 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 
NAME OF SYSTEM: ISRAA 



6. Who outside the FBI will have access to the information in the system and controls for ensuring that only authorized persons 
can access the information: 

ISRAA information does get disseminated outside the FBI to include DOJ, Congress at the direction of the Congressional 
Affairs Office, and other entities at the direction of the OGC. 

7. Has this system been certified and accredited by the FBI Security Divisions? _X_Yes _No 

8 Is this system encompassed within an OMB-300? _Yes _No _X_Don't Know 

(If yes, please attach copy of latest one.) 


L Was the system developed prior to April 17, 2003? 

_X_ YES (If "yes," proceed to Question 1.) 

_NO (If "no," proceed to Section II.) 

1. Has the system undergone any significant changes since April 17,2003? 

_YES If "yes," please explain the nature of those changes: 

(Continue to Question 2.) 

_X_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 

and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 

2. Do the changes involve the collection, maintenance, or dissemination of information in identifiable form about individuals? 

_YES (If "yes," please proceed to Question 3.) 

_X_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 

and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 

3. Is the system solely related to internal government operations? 

_YES If "yes," is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," a full PIA is required.. PTA is complete.) 

_No. (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for 

review, approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: ISRAA 

no PIA is required. (FBI and DO) reviewing officials reserve the right to require a PIA.)) 
_NO (If "no," go to section III to determine if a full or short-form PIA is required.) 



IL For systems developed after April 17, 2003. 

1. What is the purpose of the system? (Answer in detail unless details already provided in A. 2 above): 


(Continue to Question 2.) 

2. Does the system collect, maintain or disseminate information in identifiable form about individuals? 

_YES (If “yes," please proceed to Question 3.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 

and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 


3. Is the system solely related to internal government operations? 

_YES If "yes,” is this a Major Information System (as listed on OGC's FBI NET website)?: 

_Yes. (If "yes," a full PIA is required.. PTA is complete.) 

_No. (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) 

for review, approval, and forwarding to DOJ’s Privacy and Civil Liberties Office. Unlessyou are otherwise 
advised, no PIA is required. (FBI and DOJ reviewing officials reserve the right to require a PIA.)) 

_NO (If "no," go to section III to determine if a full or short-form PIA is required.) 


III. Full or Short-Forni PIA 

1. Is the system a major information system (as listed on OGC's FBINET website)? 

_YES (If "yes," a full PIA is required. PTA is complete.) 

_NO (If "no," please continue to question 2.) 

2. Does the system involve routine information AND have limited use/access? 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 
NAME OF SYSTEM: ISRAA 



YES A short-form PIA is required. (I.e., you need only answer Questions 1.1,1.2, 2.1, 3.1, 4.1, 5.1 (if appropriate), 6.2, 6.3, 

and 8.9 of the PIA template.) Please note that FBI and DOJ 
reviewing officials reserve the right to require completion of a 
full PIA. (PTA is complete—forward with PIA.) 


NO (If "no," a full PIA is required. PTA is complete.) 
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ALL IMfOHMATIOM CGETTAIITlIl 

HEREIN IS UNCLASSIFIED 

DATE 10-23-2014 BY NSICG/C32W33BS-1 

FBI Privacy Threshold Analysis (PTA) Cover Sheet (ogc/pclu(R ev. 07 / 06 / 07 ) 


NAME OF SYSTEM: Integrated Video Imaging System (SVIS) 


FBI SYSTEM CONTACT PERSON 

FBI OGC/PCLU POC 

Name: 

Name: 

Program Office: Financial Systems Unit, Systems Support Section 

Division: ITOD 


Phone 

Phone: 

Room Number: 7338 

Room Number: 1302 

Date PTA submitted for approval: 


FBI DIVISION APPROVALS A PIA (and/or PTA) should be prepared/apprcved by the cognizant program management in 
collaboraticn with IT, security, and end-user management and OGC/PCLU. (PIAs/PTAs relating to electronic forms/questionnaires implicating 
the Paperwork Reduction Act should also be coordinated with the RMD Forms Desk) It the subject of a PTA/PIA is under the program 
cognizance of an F BIN (^Division, prior to forwarding to OGC the PTA/PI A must also be referred to the FSIHQ. Division for program review and 
approva!, if required by the FBiHQ Division. 



Program Division: Security Operations Section (SOS) 

FBI H Q Di visi on:Secu rity 

Program Manager 

Signature: /s/ 

Signature: /s/ 

(or other appropriate 

Date signed: 10/31/07 

Date signed: 10/22/07 

executive as Division 

Name: 

Name 

determines) 

Title: Unit Chief 

Title: Management & Program Analyst 

Division Privacy Officer 

Signature: 

Signature: [not signed] 


Date signed: 

Date signed: 


Name: 

Name: Jeffrey J. Berkin 


Title: 

Title: Deputy Assistant Director 


Upon Division approval, forward signed hard copy plus electronic copy to OGC/PCLU (JEM Room 7338), 

FINAL FBI APPROVAL: 


FBI Privacy and Civil Liberties Officer 

Signature: /s/ 



Date Signed: 05/16/08 



Name: 

David C Larson 


Title: 

Deputy General Counsel 


Upon final FBI approval, FBi OGC will distribute as follows: 

1 - Signed original to 190-HQ-C1321794 
Copies: 


1 - DOJ Privacy and Civil Liberties Office-Main Justice, Room 4259 

2 - FBI OCIO / OIPP 

1 - FBI SecD (electronic copy via e-mail) 

2* - Program Division POC /Privacy Officer 
2*-FBIHQDivision POC/Privacy Officer 

(*please reproduce as needed for Program/Division file(s)) 


1 - OGC\PCLU intranet website 
1 - PCLU Library 
1-PCLU Tickler 


EPIC-166 





FBI PRIVACY THRESHOLD ANALYSIS (PTA) (OGC/PCLU (Rev. 07/06/07) 

NAME OF SYSTEM: Integi rated Video Imaging System (IVIS) 

For efficiency, a system owner or program manager can be aided in making the determination of whether a Privacy Impact Assessment 
(PIA) is required by conducting and following Privacy Threshold Analysis (PTA). 

Whether or not a PIA is required, the system owner/program manager should consult with the FBI Records Management Division (RMD) to 
identify and resolve any records issues relating to information in the system. 

A PTA contains basic questions about the nature of the system in addition to a basic system description. The questions are as follows: 

A. General System Description: Please briefly describe: 

1. Type of information in the system: 

IVIS contains an Access Database file of personal information from the Bureau Personnel Management System (BPMS), and the photos and 
signature files are stored on the Security Division's unit shared drive. 

a. If the system is solely related to internal government operations please provide a brief explanation of the quantity and type of 
employee/contractor information: 

IVIS currently houses 113,000 records and validates the following data from BPMS: Name, Social Security Number, Clearance, File Number, 
Phone Number, Extension, Home Telephone Number, Address, Retirement Date, and Cost Code. 

2. Purpose for collecting the information and how it will be used: 

IVIS is used to create identification badges and credentials for Bureau employees, background investigators, chaplains, contractors and task 
force personnel. 

3. The system's structure (including components/subsystems): 

IVIS consists of standard FBI workstations configured to connect to the Access database through the Trilogy domain and have the IVIS client 
software installed. 

4. Means of accessing the system and transmitting information to and from the system: 

Login through the Trilogy domain, then login through the IVIS application. 

5. Who within FBI will have access to the information in the system and controls for ensuring that only authorized persons 
can access the information: 

Access to IVIS will be controlled by unique user accounts and system roles. Only users assigned to the FBI's Access Control Unit, and IVIS 
Administrator and ISSO roles will have access to user account data. Only the Privileged User and system administrators will have access 
to the server's desktop. Total number of users within the ACU is | | there are | S ystem administrators, and | | ISSO. 

6. Who outside the FBI will have access to the information in the system and controls for ensuring that only authorized persons 
can access the information: 

No other agencies outside of the FBI use or will have access to the system or to the information in the system. IVIS uses the existing 
access control measures within the Secret Enclave's Active Directory for providing authorized users access to the IVIS. 

7. Has this system been certified and accredited by the FBI Security Divisions? _X_Yes _No 

8 Is this system encompassed within an OMB-300? _Yes _No _X_Don’t Know 


b7E 
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(OGC/PCLU (Rev. 07/06/07) 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: Integi rated Video Imaging System (IVIS) 

(ifyes, please attach copy of latest one,) 


Was the system developed prior to April 17, 2003? 

_X_ YES (If "yes," proceed to Question 1.) 

NO (If "no," proceed to Section II.) 

1. Has the system undergone any significant changes since April 17,2003? 

X YES If "yes," please explain the nature of those changes: 

The current system is described in Part A above. 

(Continue to Question 2.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 

and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 

2. Do the changes involve the collection, maintenance, or dissemination of information in identifiable form about individuals? 

_X_YES (If "yes," please proceed to Question 3.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 

and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 

3. Is the system solely related to internal government operations? 

X YES If "yes," is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," a full PIA is required.. PTA is complete.) 

_X_No. (If "no,"the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) 

for review, approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise 
advised, no PIA is required. (FBI and DO) reviewing officials reserve the right to require a PIA.)) 

_NO (If "no," go to section III to determine if a full or short-form PIA is required.) 


For systems developed after April 17, 2003. 

1. What is the purpose of the system? (Answer in detail unless details already provided in A. 2 above): 


(Continue to Question 2.) 


2 
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(OGC/PCLU (Rev. 07/06/07) 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: Integi rated Video Imaging System (IVIS) 

2. Does the system collect, maintain or disseminate information in identifiable form about individuals? 

_YES (If "yes," please proceed to Question 3.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 

and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 

3. Is the system solely related to internal government operations? 

_YES If "yes," is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," a full PIA is required.. PTA is complete.) 

_No. (If "no,"the PTA is complete and should besent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) 

for review, approval, and forwarding to DOj's Privacy and Civil Liberties Office. Unlessyou are otherwise 
advised, no PIA is required. (FBI and DOj reviewing officials reserve the right to require a PIA.)) 

_NO (If "no," go to section III to determine if a full or short-form PIA is required.) 

ML Full or Short-Form PIA 

1. Is the system a major information system (as listed on OGC's FBINET website)? 

_YES (If "yes," a full PIA is required. PTA is complete.) 

_NO (If "no," please continue to question 2.) 

2. Does the system involve routine information AN D have limited use/access? 

_YES A short-form PIA is required. (l.e.,you need only answer Questions 1.1,1.2, 2.1,3.1,4.1,5.1 (if appropriate), 6.2, 6.3, 

and 8.9 of the PIA template.) Please note that FBI 
and DOJ reviewing officials reserve the right to 
require completion of afull PIA. (PTA is 
complete—forward with PIA.) 

_NO (If "no," afull PIA is required. PTA is complete.) 
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FEDERAL BUREAU OF INVESTIGATION 
FOI/PA 

DELETED PAGE INFORMATION SHEET 
FOI/PA# 1272295-0 


Total Deleted Page(s) = 1 
Page 4 ~ b3; b7E; 


XXXXXXXXXXXXXXXXXXXXXXXX 
X Deleted Page(s) X 
X No Duplication Fee X 
X For this Page X 
XXXXXXXXXXXXXXXXXXXXXXXX 



ALL IMfORMATIGM CafTTAINlD 

HSBEIM IS DNCLASSIFIED 

DATE 11 -os-2014 BY NSICG/C32W33BS1 


UNCLASSIFIED//: 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM f PROJECT; | 

BKR FBI Unique Asset ID; IZZ 


FBI DIVISION INTERMEDIATE APPROVALS fee®$>lefe as tsec^iry «wf will* 

»t SSL 1 


Division: 

iTSeiT 


| F^ftO Division:; 
TSC IT 




Frogfitm Manager (or other appropriate 
executive as Division determines) 

P 

ivisiem Privacy Officer 

jSignaUire: 


VTA 

jivUurc: | 

j Date signed: Wi 0/2012 



lie signed: 

| Marne: P 



£ie; | 

Title: Procram Manual 



fe: _ ; _ r .... 

J Signature- 

Date - 7 - 

p::Q ; 

U-4-—- 

enature: 1 1 j 

M s!gned: %/ A? / 2 V 

Name: 

1 Name: i! 

Title; !T Brand? Chief 

[ Title: TSC Privacy Officer j 
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b7C 


AfitriU! dlvfekin nppmv&fe* fi>rYvnr<i signed ted .copy pincctjjy to III! 

OCiaiHX!l{JEf* 7350)* 

Cllss FBI Privacy and Civil Ubense* OifieeC. determinations, conditions. and/or ilmtf approval 
wili be recorded on the loitering page;) 


ONCE A SSI FI ED //FOR OE 
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FINALFRI APPRO VAL / DETERMINATIONS / CONDITIONS. 

PI A is required by the E-Government Act. 

_P1A is to be compiled asa njatierofFfJPDCB discretion, 

j is PI A to be published on PR I.GOV f nBer anyI’tSlO F01A ircda&lEmsI?: Yes, 


No lindirute reason): 


Af_ P1A is Hdirequired for the ibflowhig reason#: 

System does not collect, maintain* or disseminate Plf. 

System is grandfathered (in existence before 4/1 7/2003:; no later changes posing signiltcmu privacy risks). 
_ iniurmation in the system relates to internal government operations. 

System has been previously assessed underan evaluation similar to a FIA, 

.. .. No signiFeant pri vacy Issues tor privacy issues are nnchmmod). _ 


JL_Other kfe::e»heif 


Applicable SORNp): 'To the extent a SORN is required lor this inlormatton. the i suko; ts appifcame, 
.l«stiee/EBl-019. 

Notify FBI RMP/RIDS per MICX3 190,23? ,, , Yes^-Seesample EC on PCLU intranet website here: 

ibtp:7/la>me®Q/OGC/XTB/IR?Lil/IYivae.yCivjl%2(iLjbeKles%20.Fibraiy/forttt_forj«sogl90“2*3 ; _eepvpd 
SORN/SORN mvlsien(s)required? s No _;_Yes (hkllcme revisions oeeried);: 

prepare/mvise/aililPrivacy Act {e)|3} statements iW related forms? jx^No Yes (indteate Reims m seated >; 



records! The program should consult with RMD to ideotiiy/resoive any Federal records/clectroaSe records issues. 
The system may contain Federal records whether or not it contains Privacy Act requests and, in any event, a records { 
schedule approved by the National Archives and Records Administration is necessary. RMD can imwide acHhiee on this j 
as well as on compliance with tnouircmcgtsjor Electronic Recordkeeping CeriiOcatjonand any necessary' 

Other; 


Elizabeth Withneii Acting Deputy General; 
_ Counsel 

5 FBI Privacy and Cavil Liberties Officer 


Signature: 
Date Signed: 
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DECLASSIFIED // FOR OF| 
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U NCLA SS I FIEJ> / 



t INFORMATION ABOUT THE SYSTEM / PROJECT 

L Provide a general description of the system or project that Includes: (a) name of 
the system/project, including associated acronyms? (b) structure of the 
system/project, including interconnections with other projects or systems; (e) ^ 
pu rpose of the systera/projeet; (it) nature of the information in the sysieimp? ujeet 
an<l how It will be used? (e) who will have access to the information in the 
system/project; (f) and the manner of transmission to ail users. 
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UNCLASSIFIED // FOR 



2. Doss the system/project collect, maintain, or disseminate any information about 
individuals (he,, a human being or natural person. regardless of national by}? 

NO 11f no, STOP. The PTA is non complete and after division approvals} 
shoal d he submitted to FBI OOC/PCLU for .final FBI approval. Unless you are 
othersrlse advised, no PIA is required,| 

.X YES {Ifyes, please eontmue,j 

Jv Please indicate if any of the following characterssties apply to the information in the 
system about individuals;: Bear in mind that log-on Information may identify or be 
linkable !o an individual. 

{Cheek all that apply,.) 

X. The iiifonrtation directly identifies specific individuals. 

X The information is intended to be used, in conjunction with, other data elements,, 
to indirectly identify specific individuals. 

J_The Information can be used to distinguish or trace an individual's identity (le,, 

it Is linked or linkable to specific indi viduals). 

if yon marked any of the above, proceed to Question 4. 

_ N o ne o f t he above. I f none of the above, describe why t he in formation does not 

identify specific individuals either direetly or indirectly, [if you checked this item, 

STOP here after providing the requested description,} 

4, Does the systera/projeet pertain only to go vernment employees, contractors, or 
consultants? 


X NO 


YES 


5, Is information about United States citizens or lawfully admitted permanent resident 
aliens retrieved from the systern/project by name or other personal: identifier? 

j;_ NO. {If n o, s ktp ip q aesi to n 7, j 

X __ YES, {If yes, proceed to the nexf question.} 

6. Does the system.foroject collect any Information directly frmp the person who is the 
subject of the information? 

. X.._NO | If no, proceed to question 7.J 
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YES 


a. DoesIhs s^tem/projectsupport criminal, E'F, or FEI investigations or 
assessments'? 

NO 


. YES (If yes, proceed t& question 7,| 


b. Arc subjects of information from whom the information is directly collected 
provided a written Privacy Act (c)(3) statement (either on the collection form or via a 
separate notice}? 

NO (The program will need to work with POLO to dcvelop/imp 1 emcnt 
tire necessary form(s}.| 

YES identify any forms, paper or electronic, used to request such 
information from the information subject; 


7. Ate Social Security Numbers (SSNs) collected, maintained or disseminated front the 
systcm7prp)ect? Foil ISNs should only be used as identifiers in limited instances. 

NO _ _X _YES I f yes, check nil that apply: 

SSNsarc necessary to estabiish/confmn the identity of subjects, victims, 
witnesses or sources in this law enforcement or intelligence activity. 


SSNs are necessary' to identify FBI personnel in this internal administrative 

system. 

__ SSNs are Important for other reasons. Describe: 

X The system/project provides special protection to SSNs (e.g„ SSNs are 
encrypted, hidden from ail users via a look-on .table, or only available- to certain 
L Describe: 



It is not feasible For the system/project to provide special protection to 
SSNr Explain: 


UNCLASSIFIED# FOE @ 
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UNCLASSIFIED It 


Is the system operated by a contractor? 

JUfe 

Xes, Information systems operated by contractors for the FBI may he 
considered Privacy Act systems of records. The Federal Acquisition Regulation 
contains standard con tract clauses that most be included in the event the system 
collects, .maintains or disseminates PH and additional requirements may be 
imposed as a matter of Department of Justice policy. Consultations with the 
Office of the General Counsel may he required if a contractor is operating the 
system for the FB I, 

Has the system undergone Certification <& Accreditation (G&A) by the FBI 
Security Division (SecD)? 

X NO If no, Indicate re ason; if C&A is pending, provide anticipated 
completion date: 


.Y BS If yes, If known; 

Provide date of last C<& A certillcation/rc-eertHlesdsou; 
Confidentiality: tow Moderate High Undefined 

In tegrdy: Low_ M ode rate_High_Undefined 

AvadaMiity: Low Moderate_High Undefined 

Mot applicable - tins system is only paper-based. 

10. is tiiissystcsm/pi'plectfhesuhieet of or. OMB-300 budget submission? 

X MO 

YBS If yes, please provide the dale and name or 
title of the OMB submission; 


if. 


Does the system conduct data min ing as defined id Section $04 of the 
Implementing Recommendations of the if! 1 Commission Act of 200?, ILL, 1 Hi¬ 
ll (codified at 42 USC 2000ce-3)? 


UNCLASSIFIED 
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OKCLASSIFIEO 
^ X NO 

___ YES If yes, please describe the data mining function; 

O. is this a national security system (as determined fey the Sect)}? 

NO X YES 

13, Smiosnf System/Fniiooi; 

This is a new system/ project in development, flf yon checked this hfdek, 
STOP. ThePTAls o«w complete and alter division apprnval|s) should he 
submitted to FBI OGG/PCLU for final FBI approval and determination If 
id A a ml/or other act ions are required,] 

11 EXISTING SV.ST.EMS-/ PROJECTS 

J, When was the system/project developed? July 3008. 

2, Has the system/prqjeet undergone any significant changes since April 17,2003? 

X.J40 flf no, proceed to next question (11,3), j 


YES If yes, indicate which of the following changes were involved (mark all 
changes that apply, and provide hmf explanation for each marked change); 

A eon vers ion from pape wbased records to an electronic system, 

A change from information in a format that is anonymous or non- 
iden tillable to a format that is identifiable to particular individuals, 

_ A new use of an IT system/project, Including application of a new 

technology, that changes how information in identifiable form is managed, 
(Far example, a change that would create a more open, environment and/or 
avenue for exposure of data that previously did not exist.) 

A change that results in in formation in identifiable forth being 
merged, centralized, or matched with other databases, 

A new method of authenticating the use of arid access to 
information in identifiable form by members of the public. 
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_A systematic mcatporafioti q| : ' databases of ion in 

identifiable' form purchased or obtained from commercial or public sources, 

A new interagency use or shared agency function that results in 
new usss or exchanges of inlbjEtmtion in identifiable form, 

A change that results in a new rise or disclosure OfiolSnnarfon in 
identifiable form, 

.. i A change that results in new items of information In Identifiable 
form being added into the system/protect. 

__ Changes do not involve a change in the type of records mamtamefo 

the indi viduals: on whom records are mamialnedyOr the use or 
dissemination of information from the sysienPprojeet, 

Other {Provide brief explanation}: 

3. Ooes a Id A for this systemfpi'Ofeef already exist? 



MO 


YES 


I f yes; 


a. Provide date/title of the IMA; 

b. Has the system/prOfeet undergone any stgniff cant of tangos 


since the PIM? 



YES 


[The PTA is now complete and after division approval?*) should be submitted to 
FBI OCC/PCUi for final FBI approval and determination if IMA « ml/or other 
aeiinns are requtrethf 


UNCLASSIFIED it EOlCC 
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1, Provide a general description of the system hr project that includes5 §t); tmme of 
the system/project, iadmfmg assoefofod sermryms; ib) structure of the 
sysformforfocct, mdudfog letereohoectmos wdh other projects or systems; (el 
porposc of the system/projeei; (d) tAtlttre of the Ittfommfon ht the system/grojeet: 
post how It wli he osed; (e) who wit! have access to the loformadfon m the 
system/project; (ft and the summer of irammdssfou to all users, if ho: kit’d of 
foiorotaiion may he available m ihc System Sectraiv Plan, if available, Chi ffcm a Concept 
ofOperatfosis document. ood coo be cut and pasted hemes: 


The Laboratory Network (LsbNet) is a sesisidve but tmdassihed information system that 
is a subnet of Tj jdet. LahNet nrovides access to the Laboratory Information Management 


System t LIMBS 


No vAlKfor TDNfof foxNkd d 'NPt< '>v;-d -\rNS iViVN'i-'W' 

<»>:0* V vl V s v * S**-V '•> > vV * vJn' v.v.v J J v y y..\ >. V J va 


f > ; b y :>:c-\*\'L:Yv>:< c* :• ev' y\:yp:; v i'> •:<«•<• vwv^vv^pN,' » vVyy-y-’r! % 

\ :..-.v.c J :«Py vaN>>: i> <r> A \.\ :: V:< t.«:\••>;■:■: <-vl <>•. Sv jcsvr wtyxy 

i'V<s 5 'V\><>v>c V\.'\NN A ts'S! ;\’K' ; >•• »i}N^ i La.-i L-. i ;>,$ v? cwVf - >v '.;vy 'ryrVwptrt'iVs.'ib' Nv Vt 

> : 1:ft :>.•.%• :.s'> \ a j vBajv : v; .• v.v).«a V b'b aN Ma) IaJ.va.' >.'.' .1..:a:.'.v< v: >. t vN\. >.>. s' N :a: a ,aCva aSN va a>a. aa.\.w o > Ntv .* t.». 

and: cot the various Applications residing on fofoN-d The scope of the information 
contained in Lab Net is restricted to Aciivp Directory user login identifiers and baste 
profile information., such as job title, supervisor, email address and phone number. The 
idonti hers allow for access to various applications' hosted on LahNet, and are uncled on 
:aiO>: eyCS. Scpat ate gt: v acy ot Ici-ii>a.:,a!W> wre. PC o t c o <n. c 0 a.t> roc s*nt ipua ao; • n c nO. 0 P S, 
melddiog LfMS, that access La.bNct, 

Access to Lab Net is restricted to LSI personnel Inehidutg: contractors, task: force 
members. and detadees to the FBI from other agencies. Upon request and approval 
through the LabNei network administrator. end users : are Issued password conirodcd 
:|fo|op aecounts, which allow users ta log info LahNet: from F .81 wos'kefotfons:, 

2 . Docs the systent/proiect collect, emtefam. or disseminate any Information about 
individuals :(l,e.. a human being or natural person, regardless of nationality)? 

NO |ff mu STOP, The FT A is ssf complete and alter division approvalfo) 
sfoitud ue st tout rt t err to .e A t OhLt lr C.A.A.: tor ft cat r At approval, ernleas you are 
m.oe.rwtse at!’insen, no ht \ :s eoqm.red,d 

X YES flf yes, please comfoue.) 

(Ac noted above, the only Pit coUecto;! is logon anti profile Information.) 

3 . Please indicate If any of the FT lowing characierietfos apply to the information irs the 
system about individuals: Bear in mind thru fog-on information may identity or ho 

Lt> i>\ vvOaN<’ LNV oil >.B\LNvV > sii.U.'T • 

(Check: |ii that apply,) 
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ALL IMfOHMATIOM CGETTAIITEB 

HEREIN IS UNCLASSIFIED 

DATE 11-04-2014 BY N3IOG/C32W33BS1 


UNCLASSWlt 


fOGC/pa,U (R<:v. 04 m TEE G 


NAME OF SYSTEM / PROJECT: Laboratory raft?rmauon Mana:S(?rnent System (ISMS) 




j E¥ST EM/FRO>IE€T F O€ 
| Name: 

i Program OiGee: eLAB 
| DAM om Laboratory 
I iw{— 

j i _ 

I Room Number; 5 W Floor 


III Q€€??€I,fJ FQC 
Name: 

Ptmam 

NUMbor; JBH 735b 


FBI HQ Division: 
LalmnBorr 


FBI DIVISIONINTlIFBlPtATEAPFROV ,MU§. 

| program Manager (or other appropriate: j Pi vis ion Pri vacy Officer _ 

I execute ve us DBnMon cR. terms o eg) I 

} Program Division: : Signature: j Signature: 

j ITM1) I Date s igned;; znzn ^ == ^— I Dale s timed: 1 : n r v r ? ?; m 

| ! Namc: | | fellMiHGl < f Naon:.:|_ \- $■ 1 

| | Title: Progra m Manager ' j Tide: IT Spec ini La. ITMp Pnvox^'' QfI|ge; 

| FBIHQ Division: j Signamm: :| Signatu.nr ,.4^ 

j ILaboratory ] ; IMestped: | Date signed: 

i||||||||||||||||||||||||||||||i|||l||||li||||||||||||||||||||||||||||||l 

| I: 'Pile: f Title: forenviv Scienee: Sepporl: Secitf n 

(,.. ...... . . .. .... .. .... .. ......., I,.. . ..... . ................ . ..I... . . ...... ... ............. .... ................................................. ............ . ........... __ j; Cine? .. .. , .... ... ...... 


Mte:r nil dR ision approvals, forward signed tsnrd copy plus eleeteos'be copy to FBIPDOPCLD (JEH 73511), 
(The FBI Privacy and Civil Liberties Oilseeds determinations, conditions, and/or fInal approval will be recorded on do 
ioiknvma page > 
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ONCLASSfFlFXJ 


FINAL FBI APPROVAL / DETERMINATIONS / CONDFOONS: fTILs: section will X xomnleicd by the FBI 
PCLU/PCLO Rdlowma PI A subnmsson. 'The PI A d./after 4:ip to thy nc>«t page and continued 

|: PIA is squired fey Pte .E-QpvyrptpfcntAct. 

| .PIA is to be completed as a matter of FBI/DOJ dberetion, 

| is PIA To :be published or: FB1.GOV {fiber soy RMD PCI A wdaebonO? Yes. No■mdDwc rsmsoaj: 


f t X PIA is net respired for the following re a vo w s): 

.System does:not collect. main tang or disseminate PIT 

__ System, is grand fathered (m existence before 4/17/2003; no later changes posing sigt 

. I'nforniatba in the system refates to internal government operations. 

.System has been previously assessed under an evaluation similar to a PIA. 

No significant privacy issues (or privacy issues arc unchanged). 

X Other {describe}: System meets the requirement for a "'routine database./ 1 and Is ey 
which: covers those svstenm 


meant privacy nsx.s). 


overed fey the PIT 


| Applicable SORN(s): F8I-002 (Central Records Syslblrf 

| Notify FBI RMD/RIDS per MiOG 190,23? X N o _Yes~>8ee sample FC on PCLU intraaet website help: 

|f|| !:ttp:3home/PO/OOC/bll3/PCLU/PrivacyCivii?a20Liberties?i20Iibrary/form for !«iogi90-3-3_ ec.svpd 

| aOF. NnOF N revisioms) room mo/ X N o Yes tuKoeate revisions neetieos: 


Preea re/re vise/addi privacy Act ie/K3) atatements for related forms? No Yes {Indicate forms afieetedL 


| RECORDS, Tnc program should consult with RMD so ideritifyAesoive any Federal rs-cords/electronic records issues. 

I The system may .contain Federal records whether or not it contains Privacy Act requests and., hr any event, a records 
| schedule approved by the National Archives and Records Administration Is necessary. RMD can provide advice on ffe. 
i as well: as on eomnllanee with Tenth remen is for Fleefronle Reeordkeeoioc Certiocatioo and arm necessary updates. 


I_._I u»u enset 

Privacy and Civil Liberties Unit 

Jacqueline F. Brown, Acting Deputy General 

Counsel 

FBI Privacy and Civil Liberties Officer 


I mgnaiure: 1 
\ Date bignedj 
| Slgnhltrc: 

I ..liars/' 0' V.:/W.: 



ty/ sW / /O | 
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I v ifonvkfo a geherM dMenpipM; 0 !' the system or project that indudcst fh| immw of 
th« sysfoai/projeet* including: ossoetotod (h) structure of the 

system/project, fosbklfag foiercdunecfteus with other protects or systems; (e) 
purpose eftlie sysienLgrojeeC td) s-mtoro of tfeo information to the spftem^roJMt 
Pitt how If will be used; (e) who wilt Imre access to the mimtimimn to the 
systcm/project; (ft sad the mm&$¥ of irgusnfissitm to oil users. 

The Laboratory Information Management System (LlMS) Is 0 Commercial Off the Shelf 
(COTS) product with minor cfolofolxotfe to include an mierfoee with $Ta€SDNA\ 
□MS provides a web-based system for the Laboratory Division (L0) to track evidence, 
maintain forensic analysis cale notes, and: generate tepfos of examination at the 
unclassified level. Case Notes are defined: as the documentation of procedures,. standards, 
controls, instruments used, observations made, results of tests performed, charts, graphs, 
photos, and: other documents generated which are used to: support the examiner's 
conclusions, lleports of Ekitmihatlon are the official report that presents case-related 
information to a contributor regarding LB I Laboratory acdvuy. Evidence is defined as an 
item submitted for cxarmnationfo;. C hai n of Custody records: all trims lets of evidence 
over which the FBI Laboratory Ids control 

□MS is accessible via the Laboratory Network LLabbteft a:subnet of Uhlei, to authorized 
LD employees, contractors, tasl: fomc members, and: detaileeb to life 1,0. The system is 
not accessible to other FBI Divisions or to the: general public, find, users, will be issued 
password-controlled logon accounts by the system administrator, which will allow users 
to I .02 into the L1MS from FBI workstations, 


User groups" are established by 11) management based on a defined need to know and an 
appropriate rote requiring access to the data. The integri ty of the data is preserved 
through the pro-defined user groups with varying levels of modification privileges, 
Oversight Is provided through the wifia! gram: of access and through the ability to audit 
system use, (Audits are performed upon request of the FBI Lah.}: The system also allows 
the restriction of ease submissions to individual, authorised users to bide sensitive 
information- from improper access or modification. 

The LIMB includes personally Identifiable information: (PI;; contained m the LIMB audit, 
log (e.g., user name; and user login identifiers. The system also includes FIX that the FIB! 
has legally collected and maintains In other FBI sy stems, sited as Automated Case 
Support (ACS; and Sentinel., or that is publically available. 


Sample Tracking and Caano; Svasctn fcnot)eoxv:rti>oatO(inc: Oerd, miKSeL»0N4-apcc;;Vc UMS apfo by 




I.IMIS captures evidence-related information in database tables, information iupurted by 
LIMS users foelnheu but is not limited tor 

« Maine, agency, and address of contributor requesting I..D services; 

« Sstbioct of crone to incin.de name, race, sen, dote of birth, and FBI number: 

Victim of crime to include name, race, sen, and date of birth; 

* .Assigned Lid examiners. 

The FBI currently manages the flow of evidence through the laboratory in a largely 
paper-based process, with a limited 'fo-aml-ouf database that shores when an Irena enters 
d.m nnscneiOvwso.v te.soag, wne*t •-'natvocs a.wr r-oowinard, one. Vvt.en toe neo, teases the 
laboratory. There is no division-wide or enterprise capahi lay available. Use of ad-hoe 
databases aad .manual stovepipe processes remain the only means of evidence tracking. 
LIMS is intended to update and improve the current tracking process. 


2. Does the system/project collect, maintain, or disseminate any information about 
individuals Ike,, a human, being or natural person,, regardless of nationalvty)2 

MO Iff my ITOlh 1 be Pi AJS non complete and after division approvglls) 
should be subodtted In FBI OCfo'/FCLU for final 'Fill approval Unless yens are 
oifteewlse advised, no FLA is repaired!! 

X Hill; ill yes, please continue,! 

3. Please indicate If any of the following characteristics apply to the ivrfortnatfon in the 
system about individuals: Bear In .mind font fog-on Information may Identify dr be 

AAYVLusyjryl U's.•:: > > 

B: v!\::u,>> w >.</ . i tywr y ivilwifo 

> foyt £K- 3 i aj-yjab p ) 

'y.V- L'VVM W;V.\. V -View V'PP'vV.- > 

> liiiS'f vis; t&V-vvy v.- < yLrtVs * y F M :: F > < ' :' Vfot r\«.-Ay r •:< fo 

. x : y. i yi\- . vFFl>•<;».>A-.>.vt vx; A \ y xvLVa vy.iA xVvl Myp AA.- v.v .'.'.v xlAv.yx v >\xtxvxfo> . 


Li.tV LhLv.>.l.l>t:;V: ik.vfov xM Li.U \o i\i v V yO fo\- VfovyXK i.O VUAAUxFx 

C. •• : . \ • ? > x •• o. -.V \ \ 

jXy y<V;> yv.ox-vyyy/ y, n vX.ry: c o > yyy: vy-■•»:<• xovx-5> c- 

j.V.> X-y.:X i: v V i t > ; uv-.-. k >:V M:e v V A A A V a i A V.i x v i xxVkytM . 


than wit h other data .elements. 


__ The Information can be used to distinguish or trace art individual U ideality (he., it 

is linked or linkable to specific individuals). 

If you marked any of the above, proceed to Qnestion 4, 


Motto of the above. It. none of the above, 
identity specific individuals either directly or lad 
STfIF here after providing file regoested dese 


describe why the information does n 
irectly. | If yon cheeked ibis Item, 
dptiond 


T he VACaeries listed here la account tw the visa otpo-ryot estsaorUs oflufonrsuoxi w;w0vd ism the 
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nuegrba j 


Low.Moderate.High_Lmlefhml 


AvrdkMblya .Low.Moderate.High.IJodetlned 


Not applicable - libs system Is only paper-based. 
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I, INFORMATION ABOUT THE OTTOt /'PROJECT 

L PrevM« a genetral description ef the system or project that includes:: (a) name c 
the ayndum/girujcet* JrieiMilng »«Istei acronyms; {&) sdrneftrro of the 
$ys?«m/|mijeeh meludlag' ether projects m systems} (e) 

purpose nf the sysiem/profecft fd) nature ef lift iaformaiftra m the ays temfprojeei 
and km? it will he med; (e) who will Stave awrn to the m the 

aystemfprojeet? (I) and. the manner of transmission *o»8 Mors, 

Modgate is a commercial ofBthe-sheff (COTS) software application desfpted lor 
mmmgiug sod reporting occupational health, gaiety and ppvifpnmeftt&lBata, The 
application is used by the Office of Medical Services (OMS) l-feaftheare Iftogrom Unit 
ffttCFil) to support MClPIFs clinical reeerd-loteplng operations, including mission 
readiness statistics, ft is also used by FBI: medical professionals (Ooeopot.lo.ual Health 
Norses and Physicians), industrial hygienists,, safety managers, and Drug Deterrence 
Program (DDF) eoo.niinaio.rn to dock employee-related health, events suck as: tetfaked 
Fitness lot Doty physicals (FFD): FBII i'Q clinic visits and sendees rendered; 

J v>.vXJ i\'S:vS.v A,Nig^\S.y>,s> ^ V \* x: fW V’ i-v.-S?:yis^ ivWA V v\t,j vSio.s.^ i Vv>v!>.'\ 0 : yi yi.\4.\ v )> y^ 

Additionally, DDF personnel track employee drag screening test, types, test dates., and 
tesol is» 



2. Does the systeat/projecf collect, ipamtamt m dlisetn 
lodmdoala (i,e. 5 a human being or natural person, regat 


inate any .information. about 
idless of nationality W 


....JL..I... ¥FS pf yes, please continue, j 


3 , Please indicate if any e 
system about individuals: 
linkable to m Individual. 
(Check all that apply.) 


ft: tne lolmwmg characteristics apply to the information in the 
Bear m. mind that log-on information otav klenti.fv or be 
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If pM marked any el the pipraered to Question 4, 

Nona of the above. If mine of the above, describe why the mfQmmtkm does not 

4. Does the systen/prqfeei pertain on!.v to government employees, contractors, or 

\» V.‘ VA « /\sVv \v\y a XO v 

C..||Ch : „ .X._¥!I :_ 

5, Is information about Uhltsd State citizens or lawfhlly admitted permanent resident 
aliens retrieved Dam the systernforoject hy name or other getsotml. identiSerl ; 

NCX JI.C bo, skip to puesiton,7>J 

.X ¥BS. | If yeg proceed to the nest spestlon4 

d. Does the svxtbm/protccf. collect am information di recti v tfoni the nesson selto Is the 
subject of the information? 

NO |If so, proceed to tpesfien ?,| 

_X_YES The information collected on employees, cotoes .front the PBf s 

Bureau of Personnel Management System (BPMS) and hot directly Ikon the employee: 
however, to the extent, that medical Enfonnaiion is obfoioeddvmt the Individuals via the 
iftoM listed, below In dm., these toons have Privacy Act notices. These forms are 
submitted by the employee at the time of their physical to the physician, then mailed to 
the FBI and the relevant in.fo.m>ation is entered into Medgaim 

a.. Does the system/project support crEnnmd, CT, or PCI Investigations or 
assessments! 

...._ y, _.. ... a fry,, .*; > V A i UO y> V Mxv.'.sA MAt; »*.«.** | >VA x><;A.5A;5:i!y i.U&vyV.-:* :>*..$ A As A AVAS.ix^. X\. 'i- 5; Ai A^o-Js A VA* 

exantEnhlionSv DDF testing and other health related Issues: 

.YES f If yes, proceed to tpesdoo ?>j 






















b, Are subjects of Information .front whom the Inform alion is directly collected 
provided a written Privacy Act (e)(3) statement .(either on. the collection toon or vis a 
separate notice)? 


HO (The program will need to work with POLO to devei 
the necessary formfs),) 


lent cat 


_X__ YES Identify any tons, paper or electronic,, used to request such 

JoBbmallbo Iron? the Information snh|ecE The forms that are Tied 
in Medgatc htclude the FDA06S (Report of Medical History); used Ihr a FED phytieal, 
the FD-139 (A-tdlmncalioo for Disclosure of Medical Joitmtation), FD~?S§ (lEhucuas 
Vaccine) and FI>#6Ci (Genera! Vaccine Consent Form). Privacy Act acdfor GIHA 
information notices are included on. these .forms or will he added as appospriate. 

It Are Socle! Security hftarkers (SShls) collected, maintained or disseminated hum the . 
sysfem/profeet? Full SSNs should only be used as Identifiers In limited instances.. 


NO 


X YES Dyes, > 


SSNs ere necessary to eatafeiishicontirm. the Identic of subjects, 'victims, 
witnesses or; sources In this law enforcement or intelligence activity;. 


.X_SSNs are nceesdary to Murkily FBI personnel id this imernal 

administrative system. 


X . SSNs are Intponant forothet reasons. Pesedhet Ckmmity SSNs come 
from BPMS to Medgate as a. Primary ID... The FBI will be replacing the use of 
SEN by a Unique Employee 1) (OBIB) in the Eaum, 

. : .The systenEprojoet provides special protection to SSNs (e.g„ SSNs arc 

encrypted, hidden hem all users via a look-up table, or only available to certain 
users). Describe: 

_Ilia not feasible tor the.systcm/project: to provide special protection m 

SSNs, JlXpkim 


ft. 


Isthe ssStent operated bV;a oouiractbr't 


_X No, It Is a COTS product but is operated, by FBI personnel, 

contract pomes who enter information into Mediate, 


' {A VAX’VA «> 

;;4 XvVx v v 


..Yes, Infomaation. systems operated by contractors for the FBI may he 
considered Privacy Act systems of records. The Federal Acquisition. Regulation 









collects, mammas or disseminates PII and additional may be 

imposed as a matter of Department. of Justice policy. Consultations with the 
Office of the Genera! CGanselmay be rGpited if a eommctor m operating the 
systeex&f the FBI. 

Mas the system undergone Certification & Accreditation (C& A) fey the FBI 
Sesmity Division fSecBf? 

1....... NO If no, indfcafe reaseau if O&A is pending, provide anfletpaledi 

: date. 


JS._YES If yes, please Indicate tle lallowMg^ If kmnai 


Provide da te of last €<§ A certlliea tie n/re~ eerlllkatl on 1/1M1 


Coufkieohahty: Low Moderate X filth Undefined 


lotegrhv: 


X Moderate IIMfe lladetlned 



b7E 
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_ YES I f yes, please describe the data misssg fonetlon:: 

Iliil: a, national security system fasdelertraned. by the SecD)? 


I' Ml 


YES 


Status of System/ Prefect: 

This is a new- sysieot/ project in devetopraeoL 

EXISTING SYSTEMS / FB0JECTS 
When. was the system/project developed? 2001 

afaa the system/project mfoergooe any significant changes since April 17, 2003? 
HO lit no, proceed to next ouestfon (II.3YI 


YES If yes, indicate which of the following changes were involved, f mark all 
changes that apply, and provide Erie! expiaamtkm lor each marked «tm»ge): 

_ A conversion front paper* based records to an electronic system, 

A change Horn information in a format: that is anonymous or .non- 
MeMlilabfe to a format that is identifiable: to particular indlMdmdSv 

_ A new nse of an IT systeonprojeet, including application of a new 

technology, that changes how information in. identiiable form is managed, 
(For example, a change that wold create a more open eo.vironntaot and/or 
avenue for exposure of data (hat previously did not exist.} 

_ A change that results in inirpnatlon in Identifiable form -being , 

Merged, centralized, or Matched with other databases, 

A new method of at.tthe.ntieat.lna the nse of and access to 













Privacy Threshold Analysis 

NAME OF SYSTEM: Name Check Litigation Database 

For efficiency, a system owner or program manager can be aided in making the 
determination of whether a PIA is required by conducting and following Privacy Threshold 
Analysis (PTA). 

A PTA contains basic questions about the nature of the system in addition to a basic 
system description. The questions are as follows: 

I. Was the system developed prior to April 17, 2003? 

I | YES 

[71 NO 

(If the answer is “yes” proceed to Question 1.) 

(If the answer is “no,” proceed to Section n.) 

1. Has the system undergone any significant changes since April 17, 2003? 

_I YES 

I I NO 

(If “yes,” please explain the nature of those changes and continue to Question 2.) 
(If “no,” the PTA is complete and should be sent to the PCLO.) 

2. Do the changes involve the collection, maintenance, or dissemination of information in 
identifiable form about individuals? 

I YES 

I I NO 

(If the answer to Question 2 is “yes” please proceed to Question 3.) 

(If the answer is “no” the Threshold Analysis is complete. Please send the PTA to 
the PCLO.) 

3. Is the system solely related to internal government operations? 


I—I YES 

| NO 

(If the answer to Question 3 is “yes”, please provide a brief explanation of the 
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purpose of the system, the quantity and type of employee/contractor information 
collected, and whether the system is a Major Information System. If the system is 
a Major Information System, a full PIA is required. If the system is not a Major 
Information System, PCLO reserves the right to require a component to conduct a 
PIA for a system that only collects information on employees/contractors. In either 
case, please forward the completed PTA to the PCLO.) 

(If the answer to Question 3 is “no” go to subsection IE to determine if a full or 
short-form PIA is required.) 

E. For systems developed after April 17, 2003. 

1. What is the purpose of the system? (Answer in detail and proceed to Question 2.) 

The Name Check Litigation Database (NCLD) is a limited purpose Microsoft 
Access database, limited to the collection and storage of name check litigation-specific 
data. NCLD automates the tracking of civil litigation that alleges a plaintiff s application 
for naturalization or adjustment of status has been delayed by the United States Customs 
and Immigration Service (USCIS), and that this delay is caused in whole or in part by the 
FBI’s failure to complete plaintiffs name check. The NCLD thus assists FBI OGC 
attorneys in defending against allegations that the FBI has not completed Plaintiff s name 
check, including litigation where the FBI or other DOJ components are named defendants. 
The database allows attorneys at the FBI’s Office of the General Counsel (FBI OGC) to 
monitor the status of FBI’s Records Management Division (FBI RMD) in completing 
plaintiffs name check, thus eliminating the need for FBI RMD and FBI OGC personnel to 
engage in inefficient, time-consuming plaintiff-specific correspondence. The NCLD 
supplements FBI OGC plaintiff-specific paper case files and is thus subject to any and all 
attorney-client privileges that attach to FBI OGC work product. 

2. Does the system collect, maintain or disseminate information in identifiable form about 
individuals? 

□ 

□ 


YES 

NO 


(If the answer to Question 2 is “yes” please proceed to Question 3.) 

(If the answer is “no” the Threshold Analysis is complete. Please send the PTA to 
the PCLO.) 

The NCLD collects Plaintiffs First Name, Last Name, Middle Name, Alien 
Number, and Date of Birth (if available); the named Defendant (i.e., FBI, FBI & Others, 
Non-FBI), the FBI OGC Case Number (e.g., the LCMS Number), the OGC Attorney 
assigned the case, the Date FBI OGC received the Complaint, the name of the FBI 
RMD Analyst assigned plaintiffs name check, the Date FBI RMD received the 
name check Request from USCIS, the Date USCIS Expedited the request (if 
applicable), the Status of the name check (i.e., complete, pending, or petitioner 
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unknown), and the Date the name check was Completed. 


3. Is the system solely related to internal government operations? 

r~7| YES 

□ NO 

(If the answer to Question 3 is “yes”, please provide a brief explanation of the 
purpose of the system, the quantity and type of employee/contractor information 
collected, and whether the system is a Major Information System. If the system is 
a Major Information System, a full PIA is required. If the system is not a Major 
Information System, PCLO reserves the right to require a component to conduct a 
PIA for a system that only collects information on employees/contractors. In either 
case, please forward the completed PTA to the PCLO.) 

(If the answer to Question 3 is “no” go to subsection in to determine if a full or 
short-form PIA is required.) 

The purpose of the system is described at H.l above. The information is being 
collected in support of the work of the FBI unit(s) that will use the database for 
litigation support. Access to the NCLD is limited to FBI OGC attorneys and 
paralegals tasked with the relevant litigation, and to FBI RMD personnel tasked 
with completing name check requests from USCIS. The NCLD is protected by 
user-level passwords, and access is controlled by the Unit Chiefs of the FBI OGC 
Civil Litigation Units (CLU) by granting or denying access to the CLU computer 
network drive on the FBI’s internal network system. 

III. Full or Short-Form PIA 

1. Is the system a major information system? 

| | YES 

□ NO 

(If “yes”, a full PIA is required.) 

(If “no”, please continue to question 2.) 
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2. Does the system involve routine information AND have limited use/access? Please 
explain what type of information is collected and the access provided. Please note that 
the reviewing official has the right to require the component complete a full PIA. 


YES (Please explain what type of information is collected and the access 
provided.) 


NO 


(If “yes”, a short-form PIA is required. You need only answer Questions 1.1, 1.2, 
2.1, 3.1, 4.1, 5.1 (if appropriate), 6.2, 6.3, and 8.9.) 

(If “no”, a full PIA is required.) 
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[UNCLASSIFIED] 


(OGC/PCLU (Rev. 01/05/09) 

FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

(equivalent to the DOJ Initial Privacy Assessment (IPA)) 

NAME OF SYSTEM / PROJECT: Next Generation Identification Network (NGINet) _ 


Derived From: 
Classified By: 
Reason: 
Declassify On: 


SYST EM/PROJECT P OC 

Name: 


Program Office: Biometric Development Office/ 
Implementation and Transition Unit 
Divisi on: Criminal Justic e Information Services 
Phone: 


FBI OGC/PCLU POC 

Name: 

Phone: 


Room Number: JEH 7338 


b6 

b7C 


Room Number: Module D-2 


FBI DIVISION INTERMEDIATE APPROVALS A PIA (and/or PTA) should be prepared/approved by the 
cognizant program management in collaboration with IT, security., and end-user management and OGC/PCLU. 
(PlAs/PTAs relating to electronic forms/questionnaires implicating the Paperwork Reduction Act should also be 
coordinated with the RMD Forms Desk.) If the subject of a PTA/PIA is under the program cognizance of an FBIHQ 
Division, prior to forwarding to OGC the PTA/PIA must also be referred to the FBIHQ Division for program review 


and approval, if required 

by the FBIHQ Division. 

Program Manager 

Division Privacy Officer 

Program Division: 

CJIS 

Signature: 

Signature: 

Date signed: 2'71 ~ o 

Date signed! t -// 

Name: 

Name: 

Title: Assistant Section Chief - 
Biometric Development Office 

Title: CJIS Division Privacy Officer 


Signature: 

Date signed: 

Name: 

Title: 

Signature: 

Date signed: 

Name: 

Title: 
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After all division approvals, forward signed hard copy + electronic copy to FBI OGC/PCLU (JEH 7338). 

(The FBI Privacy and Civil Liberties Officer's determinations, conditions, and/or final approval will be recorded on t 
following page.) 


[UNCLASSIFIED] 
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[UNCLASSIFIED] 

FBI PTA: Next Generation Identification Network (NGINet) 


Uoon final FBI approval, FBI OGC/PCLU will distribute as follows: 
P ... i i nf\ urn n\ 'lOI 7Q4 ffwrl to JEH 1B204 V 


>n final FBI approval, FBI win uimhuu^ . 

, . • i fiif* 1 QO HO-C1321794 (fwd to JEH 1B204 via PA-520) 

C^TSents please "print/reproduce as needed for Program/Division fi le(s)): ^ ^ 

1 - DOJ Office of Privacy and Civil Liberties (via e-mail ^§^^40 20530) 1 - PCLU UC 

(if classified, via hand delivery to 1331 Pen mAve. NW, Su , ) lpcuJLibr 

2 - FBI OCIO / OIPP (JEH 9376, attn:\-^—__-- -- 1 

1 - FBI SecD/AU (electronic copy: via e-mail to uq-1 -1 

^ 1 - RMD/RMAU (attn: \ 1 

2 - Program Division POC /Privacy Officer 
2 - FBIHQ Division POC /Privacy Officer 


1 - PCLU Library 
1 - PCLU Tickler 
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[UNCLASSIFIED] 
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[UNCLASSIFIED] 

FBI PTA: Next Generation Identification Network (NGINet) 


FINAL FBI APPROVAL / DETERMINATIONS / CONDITIONS: [This section will be completed by the FBI 
PCLU/PCLO following PTA submission. The PTA drafter should skip to the next page and continne.1 _ 


PIA is required by the E-Govemment Act. 

PIA is to be completed as a matter of FBI/DOJ discretion. 


Is PIA to be published on FBI.GOV (after any RMD FOIA redactions)? _Yes. _No (indicate reason): 

_X_PIA is not required for the following reason(s): 

_System does not collect, maintain, or disseminate PII. 

_System is grandfathered (in existence before 4/17/2003; no later changes posing significant privacy risks). 

_X_ Information in the system relates to internal government operations. 

_System has been previously assessed under an evaluation similar to a PIA. 

X No significant privacy issues (or privacy issues are unchanged). 

_Other (describe): 


Applicable SORN(s): FBI-009 (FIRS); DOJ-002 (DOJ Computer Systems Activity and Access Records) 

SORN/SORN revision(s) required? _No X Yes (indicate revisions needed): Include test data and 

test data subjects in pending revision to FBI-009. 


Prepare/revise/add Privacy Act (e)(3) statements for related forms? X No 
affected): 


Yes (indicate forms 


RECORDS. The program should consult with RMD to identify/resolve any Federal records/electronic 
records issues. The system may contain Federal records whether or not it contains Privacy Act requests and, 
in any event, a records schedule approved by the National Archives and Records Administration is necessary. 
RMD can provide advice on this as well as on compliance with requirements for Electronic Recordkeeping 
Certification and any necessary updates. 


Other: 


jUnder these circumstances, NGINet relates to internal government operations, and 
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completion of a PIA is not required. 


David C. Larson, Deputy General Counsel 
FBI Privacy and Civil Liberties Officer 


Signature: 
Date Signed? 
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[UNCLASSIFIED] 

FBI PTA: Next Generation Identification Network (NGINet) 

I. INFORMATION ABOUT THE SYSTEM / PROJECT 

1. Provide a general description of the system or project that includes: name of the system/project, 
including associated acronyms; structure of the system/project, purpose; nature of the information 
in the system and how it will be used; who will have access to the information in the system and the 
manner of transmission to all users. (This kind of information may be available in the System Security 
Plan, if available, or from a Concept of Operations document, and can be cut and pasted here.): 

Next Generation Identification Network (NGINet) 

The NGINet is the infrastructure supporting the collaboration between the FBI and its contractor 
Lockheed Martin (LM) on the Next Generation Identification (NGI) project. 1 NGINet 



b7E 


b7E 


b7E 


b7E 


b7E 


b7E 


'The NGI development and integration contract was awarded in FY 2008 and consists of a base 
year for development with nine option years. The contract included Privacy Act clauses 52.224-1 and 
52.224-2. 


[UNCLASSIFIED] 
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[UNCLASSIFIED] 

FBI PTA: Next Generation Identification Network (NGINet) 


b7E 


b7E 



2. Does the system/project collect, maintain, or disseminate any information about individuals in 
identifiable form, i.e., is information linked to or linkable to specific individuals (which is the definition 
of personally identifiable information (PII))? 

_NO. [If no, STOP. The PTA is now complete and after division approval(s) should be 

submitted to FBI OGC/PCLU for final FBI approval. Unless you are otherwise advised, no 
PIA is required.] 

X YES. [If yes, please continue.] 


b7E 


[UNCLASSIFIED] 
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[UNCLASSIFIED] 

FBI PTA: Next Generation Identification Network (NGINet) 



b7E 

3. Does the system/project pertain only to government employees, contractors, or consultants? 

_NO. X YES. 

As indicated, the system is used for testing pursuant to the contract. 

4. Is information about United States citizens or lawfully admitted permanent resident aliens retrieved 
from the system/project by name or other personal identifier? 

X NO (mostly). X YES (in some instances). 

For the most part, information in the system will not be retrieved by personal identifiers. 

b7E 

b7E 

5. Are Social Security Numbers (SSNs) collected, maintained or disseminated from the system/project? 

X NO. _YES. If yes, check all that apply: 

_SSNs are necessary to establish/confirm the identity of subjects, victims, witnesses 

or sources in this law enforcement or intelligence activity. 

_SSNs are necessary to identify FBI personnel in this internal administrative system. 

_SSNs are important for other reasons. Describe: 



[UNCLASSIFIED] 
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[UNCLASSIFIED] 

FBI PTA: Next Generation Identification Network (NGINet) 

_The system/project provides special protection to SSNs (e.g., SSNs are encrypted, 

hidden from all users via a look-up table, or only available to certain users). Describe: 

_It is not feasible for the system/project to provide special protection to SSNs. 

Explain: 

6. Does the system/project collect any information directly from the person who is the subject of the 
information? 

X NO. [If no, proceed to question 7.] 

YES. 


a. Does the system/project support criminal, CT, or FCI investigations or assessments? 

_YES. [If yes, proceed to question 7.] 

_NO. 

b. Are subjects of information from whom the information is directly collected provided a written 
Privacy Act (e)(3) statement (either on the collection form or via a separate notice)? 

_NO. [The program will need to work with PCLU to develop/implement the 

necessary form(s).] 

_YES. Identify any forms, paper or electronic, used to request such 

information from the information subject: 

7. Has the system undergone Certification & Accreditation (C&A) by the FBI Security Division (SecD)? 

_NO. If no, indicate reason; if C&A is pending, provide anticipated completion date: 

X YES. If yes, provide date of last C&A certification/re-certification: 04/28/2009 
_Don't Know. 

8. Is this system/project the subject of an OMB-300 budget submission? 

X NO. _Don't know. YES. If ves,jplease provide the date 

and name or title oithe OMB submission: 

9. Is this a national security system (as determined by the SecD)? 

X NO. _YES. Don't know. 


[UNCLASSIFIED] 
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[UNCLASSIFIED] 

FBI PTA: Next Generation Identification Network (NGINet) 


10. Status of System/ Proj ect: 

X This is a new system/project in development. [If you checked this block, STOP. The 
PTA is now complete and after division approval(s) should be submitted to FBI 
OGC/PCLU for final FBI approval and determination if PIA and/or other actions are 
required.] 


II. EXISTING SYSTEMS / PROJECTS 

1. When was the system/project developed? 

2. Has the system/project undergone any significant changes since April 17,2003? 

_NO. [If no, proceed to next question (II.3).] 


YES. If yes, indicate which of the following changes were involved (mark all boxes that 
apply): 


A conversion from paper-based records to an electronic system. 


A change from information in a format that is anonymous or non-identifiable to a 
format that is identifiable to particular individuals. 

A new use of an IT system/project, including application of a new technology, that 
changes how information in identifiable form is managed. (For example, a change 
that would create a more open environment and/or avenue for exposure of data that 
previously did not exist.) 

A change that results in information in identifiable form being merged, centralized, 
or matched with other databases. 

A new method of authenticating the use of and access to information in identifiable 
form by members of the public. 

A systematic incorporation of databases of information in identifiable form 
purchased or obtained from commercial or public sources. 

A new interagency use or shared agency function that results in new uses or 
exchanges ofinformation in identifiable form. 

A change that results in a new use or disclosure of information in identifiable form. 

A change that results in new items of information in identifiable form being added 
into the system/project. 

Changes do not involve a change in the type of records maintained, the individuals 
on whom records are maintained, or the use or dissemination of information from 
the system/project. 

Other. [Provide brief explanation]: 


[UNCLASSIFIED] 
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[UNCLASSIFIED] 

FBI PTA: Next Generation Identification Network (NGINet) 


3. Does a PI A for this system/project already exist? 
a. Provide date/title of the PIA: 


NO. 


YES. If yes: 


b. Has the system/project undergone any significant changes since the PIA? -NO. -Y1 

[The PTA is now complete and after division approval(s) should be submitted to FBI OGC/PCLU for 
final FBI approval and determination if PIA and/or other actions are required .] 


[UNCLASSIFIED] 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 


NAME OF SYSTEM / PEOJ 

'EOT; National Name Cheek Frcgraa? (NNOFi 



BIRR FBI lAfooe Asset IB:. 

SyS-ftQdSOftl 





] IMd Frotro 

! SYSTEM/BROIECT 

POC 

| FBI OGOTFC 

| Cfomffob By; 

.1 Name: 





; llenoeto 

: Frogmer Oftice: SSSIC 

MSN 

: foionn;: 


| BYdaxBly Coo 

; Division: IT Services 


| Room' 

S ember 


1 Phone1 


i Room N umber: JEM 

f M BITISM Pf IRM E IBCT AHIO?MA. 

| Program Manager (or other appropriate 


Division Pnmscv Officer 


Program Division: 
Records Management 


I Eicnltmm; o 

i it . 


i ... . .,■ . ?/;* /i rrf 
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I ■ • s> . 

i Date signed:: dyy.Lm 
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v •},, 
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SianatureJ 
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i Tide: Acting Section Chief. Systems Support \ Title: .IT Services Privacy Officer 

FINAL FBI APPROVA L / DETERMINATtONS / CONDITIONS. 

I . ..X. HA is reytthed! by the EAiovemrnenl; Act. A BIA wilt he drafted for rise National Name Check Program, 

| vvbkA will describe the N NCP system and the Name Check Dissemination Database i NCOI) k which is pari of a 
| larger system known as HMD Document' Processing System (RDFS). 

I ^_ESS is to be completed as a matter of FBI/DOJ discretion. 

T ’ ' 
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IMATION ABOUT THE SYSTEM / PROJECT 


■S &'/■ 
S, > £ $ 


: .general description of the system or project that includes: (a) nnsae of 
the systero/project, inefudiug associated acronyms; (t>) structure of Use 
^ytuem/prajreh Including mttrcmmiistmm wife other projects or systems; (ej 
purpose of the systeta/project; hi) nature of the Information in the systetn/project 
and how it will he .used; (ef who will base access to the information in the 
systeoi/projeet; (ft and the toanoer sh'trattsntissloo to ati 


The National Name Cheek Program (NNCF) Section is part of the Records 
Ma.nageme.ut Pis isiou (RMD) of the FBI. 1 he mission, oi the x N<IP Section is to 
disseminate infonnation 'from FBI files rot the purpose of protecting the linked States 
from espionage and terrorism, in response to name cheek requests received from offices 
with in the FBI. other Federal agencies or components thereo f, offices from the 
Lemsiative and Judicial Imatches of the Federal (lovcrnmentr 


Executive Order 10450 authorizes the NNCF Section to 


■conduct National Agency Checks as part of the pre-employment vetting process and 
background .investigation. 'Under Executive Order 12555 , ihc fill coordinates 
counierintelfigenec activities., by members of the Intelligence Community, necessary tor 
the conduct of ford go relations and the protection of the national security of the United 

Stictiddha. yiyiyfiyfidi:^ 
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To accomplish its mission, the NNCF Section uses an automated Information 
technology system called the NNCF system, to process name check requests submitted by 
a y&tfeftv of cnsMroetd, 


In order to provide i nformation to meet customer needs, the NNCF ssstem 
c.l.ecT.rooieal].y searches data! ~ ~ —— 


which Include records from FBI Headquarters i B1 I icld Offices, end 1 egaf 


Attache Offices. Records accessed i'tom tltesc locations contain FBI investigative, 
administrative, personnel;, and general files. 
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Name cheek requests arc submitted by customer agenmcs| 
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ALL IMfOHMATIOM CGETTAIITlIl 

HEREIN IS UNCLASSIFIED 

DATE 10-23-2014 BY NSICG/C32W33BS-1 


(OGC/PCLU (Rev. 05/15/09) 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

(equivalent to the DOJ Initial Privacy Assessment (IPA)) 


NAME OF SYSTEM / PROJECT: Personnel Recovery Isolated Personnel Reports (ISOPREPs) 


SYSTEM/PROJECT POC 

Name: 

Program Office: Personnel Recoveiy 
Division: DO 
Phone T I 

Room Number: Aquia 


b6 

b7C 


FBI OGC/PCLU POC 

Name_ 

Phone d | 

Room Number: 7438 


FBI DIVISION INTERMEDIATE APPROVALS 



Program Manager 

Division Privacy Officer 

Program Division: Personnel 

Signature: 


Signature: 

Recovery Coordination Group 

Date signed: approved 8/5/2009 


Date signed: 

(PRCG) 

NamJ | 

b6 

Name: 


Title: 

b7C 

Title: 

FBIHQDivision: 

Signature: 


Signature: 

Director's Office 

Date signed: 


Date signed: 


Name: 


Name: 


Title: 


Title: 


After a\\ division approvals, forward signed hard copy pins electronic copy to FBI OGC/PCLU fjEH 7338). 

(The FBI Privacy and Civil Liberties Officer's determinations,, conditions, and/or final approval will be recorded on the following page.) 


Upon final FBI approval, FBI OGC/PCLU will distribute as follows: 


1 - Signed original to file 190-HQ-C1321794 (fwd to JEH 1B204 via PA-520) 


Copies (recipients please print/reproduce as needed for Program/Division file(s)): 

1 - DOJ Office of Privacy and Civil Liberties (via e-mail to privacy@usdoj.gov) 1 - OGC\PCLU intranet 


(if classified, via hand delivery to 1331 Penn. Ave. NW, Suite 940,20530) 1 - PCLU UC 


2 - FBI OCIO / OIPP (JEH 9376, attn: \ 

1 - PCLU Library 

1 - FBI SecD/AU (electronic copy: via e-mail to UC | 

1 - PCLU Tickler 

1 - RMD/RMAU (attnl 1 

2 - Program Division POC/Privacy Officer 

2 - FBI HQ Division POC/Privacy Officer 



b6 

b7C 
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FBI PTA: Personnei Recovery isolated Personnel Reports 


FINAL FBI APPROVAL / DETERMINATIONS / CONDITIONS: 


_PIA is required by the E-Government Act. 


_PIA is to be completed as a matter of FBI/DOJ discretion. 


Is PIA to be published on FBI.GOV (after any RMD FOIA redactions)? _Yes. _No (indicate reason): 


_PIA is not required for the following reason(s): 

_System does not collect, maintain, or disseminate PII. 

_System is grandfathered (in existence before 4/17/2003; no later changes posing significant privacy risks). 

_xx_ Information in the system relates to internal government operations. Information relates only to FBI personnel. PTA 

completed out ofabundance of caution , but information will be maintained on a DOD database rather than on an FBI system. 

_System has been previously assessed under an evaluation similar to a PIA. 

_No significant privacy issues (or privacy issues are unchanged). 

Other (describe): 


Applicable SORN(s): CRS 


Notify FBI RMD/RIDS per MIOG 190.2.3? _No 


x Yes (see sample EC on PCLU intranet website). 


SORN/SORN revision(s) required? _No 


Yes (indicate revisions needed): 


Prepare/revise/add Privacy Act (e)(3) statements for related forms? 


Yes (indicate forms after.tec 



RECORDS. The program should consult with RMD to identify/resolve any Federal records/electronic records issues. The system may contain Federal 
records whether or not it contains Privacy Act requests and, in any event, a records schedule approved by the National Archives and Records Administration 
is necessary. RMD can provide advice on this as well as on compliance with requirements for Electronic Recordkeeping Certification and any necessary 
updates. 



David C. Larson, Deputy General Counsel 


Signature: David C. Larson 
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FBI PTA: Personnei Recovery isolated Personnel Reports 


FBI Privacy and Civil Liberties Officer 


Date Signed: 9/25/2009 


L INFORMATION ABOUT THE SYSTEM / PROJECT 

1. Provide a general description of the system or project that includes: name of the system/project, including associated 
acronyms; structure of the system/project, purpose; nature of the information in the system and how it will be used; who will have 
access to the information in the system and the manner of transmission to al users. FBI personnel who deploy to theaters of war 
are required to complete Isolated Personnel Reports (ISOPREPs) prior to their deployment. This form solicits general information such as 

that a recovery team would need to plan a recovery as wel I as 

information that only the person completing theform would know. The information can be used by a recovery team to authenticate 
missing personnel. The ISOPREP form is needed in order to quickly leverage the recovery architecture that the Department of Defense 
(DoD) has in the theater. The ISOPREPs are classified CONFIDENTIAL once they are completed and transmitted to the Personnel 
Recovery Coordination Group (PRCG) via FBINET. The PRCG then electronically imports theforms into the DoD's classified database. 
Only approved ISOPREP managers and Rescue Coordination Centers have access to the ISOPREPs via the database. l 


2. Does the system/project collect, maintain, or disseminate any information about individuals in identifiable form, i.e., is information 
linked to or linkable to specific individuals (which is the definition of personally identifiable information (Pll))? 

_NO. j if no, STOP. The PTA is now complete and after division approval(s) should be submitted to FBI 

OGC/PCLU for final FBI approval. Unless yon are otherwise advised, no PI A is required.] 

_X YES. [Ifyes, please continue.] 


3. Does the system/project pertain only to government employees, contractors, or consultants? 
_NO. X YES. 


4. Is information about United States citizens or lawfully admitted permanent resident aliens retrieved from the system/project by 
name or other personal identifier? 

_NO. X YES. 


5. Are Social Security Numbers (SSNs) collected, maintained or disseminated from the system/project? 
_NO. X YES. If yes, check all that apply: 


_SSNs are necessary to establish/confirm the identity of subjects, victims, witnesses 

or sources in this law enforcement or intelligence activity. 

_SSNs are necessary to identify FBI personnel in this internal administrative system. 
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FBI PTA: P ersonnel Recovery isolated Personnel Reports 

_X_SSNs are important for other reasons. Describe: DoD has determined that the SSN is the most unique 

identifier for all personnel. Therefore, the SSN is used to create the ISOPREP account. 

_X_The system/project provides special protection to SSNs (e.g., SSNs are encrypted, hidden from all users via a a 

look-up table, or only available to certain users). Describe: The database is maintained on the DoD's Secret 
Internet Protocaol Router. This is their classified system that is used to process information up to the SECRET level. 
Additionally, only vetted ISOPREP managers and Rescue Coordinators may retrieve the data. 

_It is not feasible for the system/project to provide special protection to SSNs. Explain: 

6. Does the system/project collect any information directly from the person who is the subject of the information? 

_NO. [If no, proceed to question 7.] 

_X_YES. 

a. Does the system/project support criminal, CT, or FCI investigations or assessments? 

_YES. [Ifyes, proceed to question 7.] 

X NO. 


b. Are subjects of information from whom the information is directly collected provided a written Privacy Act (e)(3) 

statement (either on the collection form or via a separate notice)? 

_NO. [The program will need to work with PCLU to develop/implement the necessary form(s).] 

_X_ YES. Identify any forms, paper or electronic, used to request such 

information from the information subject: 

7. Has the system undergone Certification & Accreditation (C&A) by the FBI Security Division (SecD)? 

X NO. If no, indicate reason; if C&A is pending, provide anticipated completion date: A C&A has not been done 
on this project because the information collected will be maintained on a Department of Defense database. 

_YES. If yes, provide date of last C&A certification/re-certification: 

_Don't Know. 


8. Is this system/project the subject of an OMB-300 budget submission? 

X NO. _Don't know. _YES. If yes, please provide the date and name or 

title of the OMB submission: 


9. Is this a national security system (as determined by the SecD)? 

_X_NO. _YES. _Don't know. 


4 


EPIC-183 



FBI PTA: Personnei Recovery isolated Personnel Reports 


10. Status of System/ Project: 

_ This is a new system/ project in development [Bf vobj checked this bSock, STOP. The PTA is now complete 

and after division approvals) should be submitted to FBI OGC/PCLU far final FBI approval and determination if 
Pi A and/or other actions are required J 


II. EXISTING SYSTEMS / PROJECTS 

1. When was the system/project developed? It was developed by the DoD in 2000. 

2. Has the system/project undergone any significant changes since April 17,2003? 

_NO. [If no, proceed to next question (11.3).] 


X_ YES. Ifyes, indicate which of the following changes were involved (mark all boxes that apply): 

X A conversion from paper-based records to an electronic system. 

_ A change from information in a format that is anonymous or non-identifiable to a format that is identifiable to 

particular individuals. 

Anew use of an IT system/project, including application of a new technology, that changes how information 
in identifiable form is managed. (For example, a change that would create a more open environment 
and/or avenue for exposure of data that previously did not exist.) 

_ A change that results in information in identifiableform being merged, centralized, or matched with other 

databases. 

_ A new method of authenticating the use of and access to information in identifiable form by members of the 

public. 

_ A systematic incorporation of databases of information in identifiableform purchased or obtained from 

commercial or public sources. 

_ A new interagency use or shared agency function that results in new uses or exchanges of information in 

identifiableform. 

_ A change that results in a new use or disclosure of information in identifiableform. 

_ A change that results in new items of information in identifiableform being added into the system/project. 

X Changes do not involve a change in the type of records maintained, the individuals on whom records are 
maintained, or the use or dissemination of information from the system/project. 

_ Other. [Provide brief explanation]: 


3. Does a PIA for this system/project already exist? _X_NO. _YES. Ifyes: 

a. Provide date/title of the PIA: 

b. Has the system/project undergone any significant changes since the PIA? _NO. _YES. 


5 


EPIC-184 



FBI PTA: P ersonne! Recovery isolated Personnel Reports 


[The PTA is now complete and after division approvals) should be submitted to FBI OGC./PCLU for f inal FBI approval and 
determination if PIA and/or other actions are required >] 
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(OGC/PCLi j (Re* 0B38/08) 


Urtdassified/FO UO 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 
(equivalent to the 00>j initial Privacy Assessment (iPA)} 


NAME OF SYSTEM / FRDJK1: f J rafvssinri;jl Flight Maria g«rtnvr.t(PFM) 


f ttimj 

Classified By: 

8&Mom 

Decla^lfyOm 

SVST6M/PR0JECT POC 

FBI OGC/PCtU POC 

Name; 

Name: 

Phone: 

1 

Program Office: Aviation Surveidanee Branch 

Division- CiRG 

1_1 

Room Number: 74S8 

Phone:| j 


Room Number N/& 





FBI DIVISION SNTtRMEOlATI APPROVAIS 



Program Division: CmicaJ incident Response Group (CIRG) 

PBIHQ Division: ORG 

Program Manager 

Signamr 

e: /$ 


Signature:/$ 


Date s% 

led: 

b6 

Date signed: 


Name: : 


Name':). Brill jphosOO 

....... b7C 

xiai Agent, Aviation Support U>«< 


Title: 

supervisory Sp< 

litle-Sotiiofi Chief. Sutvdlhtrtce >tnd Aviaucm Section 

(SAS) 

piVisiOh RriVaOVQfRcer 

■Stgnatur 

c; 


Signature: 


Date signed; /s 

• Kl ivirrYj^ D itvw* 


Dare signed: 


title: SS- 

VtDC; 

'dp 

Title: 


Alter ail division approvals, lofwStti signed hard top}? plus eteetconie copy to FBI ©GC/BCtU (|£H 7338},. 

FlNAt FBI APPROVAL / DETERMINATIONS / CONDITIONS: 


PfA required; No 

SQRN/iSQRN revision requite 

sjfc No 


Applicable SORN(s): 




j N^^ : 1rW-RMOj f 3RlDS':|^;^lt^i!ti0^a^: _No _Y 

0$ 



issues: _No 

— Yes: 


Prcpa re/revise/ad:d : Privacy Act (e}(Si>sratoments : for :rolatedTorms? 

! 0tbM 

-.No Yes-form sai^oc 

ted: 


David C. Larson:, Deputy General Counsel 

Sigwwzfsf 



FBI Rrryscy and'Civil 0 berries Officer 

Date: Signed: 11/25/2009 
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U nclasst fted/FQUQ 


FBI PRIVACY THRESHO LD ANALYSIS <PTA) 

NAME OF SYSTEM / PROJECT: Professional Flight Management (PFM) 


Upon final FBI approval, FBI OGC/PCLU will distribute asfollows: 

1 - Signed original to file 190-HQ r C13217d4 (fwd to }£H 18204 via PA-520) 

Copies (recipients please prim/re produce as needed for Prograrrt/DMsion ftlefs}): 


1 - DOj Office of Privacy and Civil Liberties (via e-mail to 


(if classified, via hand delivery to 1331 Pen n. Avc. NVV, Suite 940,20530) 
2 - FBI OQO /OIPP (jEH 9376, aitn | \ 

1 - FBI SecO/AU (dectromc copy: vi a e-mail to UC 

1 • RMO/fcMAU (aan i I 

2 - Program Division POC /Privacy Officer 
2 - FBI HQ Division POC /Privacy Officer 


b6 

b7C 


1 * OGC\PCLU Intranet 
1-PQUUC 
1 - PCLU library 
I - PCLU Tickler 


U ne JasSfied/FOUO 


EPIC-187 




U ndassl fled/ FO UO 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAM F OF SYST EM / PROJECT: Profession a I Flight Man agem ent (PFM) 


l INFORMATION ABOUT THE SYSTEM / PROJECT 


1Na me of the system/project. Provide current name any previous or anticipated name changes, and any associated acronyms: 

Prof ess i o n a) FI i ght M anagem ent (P FM) 


2, Briefly describe the system''s/project s structure (indtiding identification of any components/subsystems or parent system, if 

applicable). 



3 What is the purpose for the system/project? 


This project is in development to replace the Bureau Aviation and Operations (BAG) mainf rame computer program for scheduling, tracking 
and recording operational flight data. This effort is mandated by 41 CFR Section 102-33, This Government Management Regulation 
requires that all f ederal Agencies maintain aviation records in the GSA s FAIRS (f ederal Aviation Information and Records System), the 
intelligence agencies of the US. are not required to report to FAIRS but. "must maintain 0 records in accordance with FAIRS, The PFM 
Program will accomplish this- PFM collects data from all FBI Divisions with Aviation Programs as well as the Special flight Operations, 
Field Flight Operations and the Tactical Helicopter Units within the Critical Incident Response Group (ORG). 

PFM h a Windows based application intended to be the long term replacement for BAD, BAG had limited functionality and did not meet 
all the requirements mandated by OMB A-126, A-123, A-76 and 41 CFR Section 102-33, PFM was identified as meeting the record 

keeping requirements set forth via OMB A126, A123, A76 and 41 CFR §§ 102-33. It also meets an FBI Enterprise requirement to move to 
Windows and Web based applications. All FBI flight operations are now using PFM for flight record keeping purposes. 


4. Please provide a general summary of the nature of i reformation in the system/project and how it will be used: PFM wi If be 

primarily used to 


record data on the flights and process reports for analysis and official 


report} n g req u (rements. 
concerns of aircraft. 


There are other features in the database that can maintain 


b7E 


5. Does the system/project collect, maintain, or disseminate any information about individuals in identifiable form, be., is information 

linked to or linkable to specific individuals (which is the definition of personally Identifiable information (Pi05? 

_NO. Stop, The PTA is now complete and after division approvals) should be submitted to FBI OGC/PCLU 

for final FBI approval Unless you are otherwise advised, no PIA is required, 

X _ YES., If yes, p I ease conti n u e. 


UndasSfbd/FGUO 
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U nclasst fied/FOUO 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAMF OF SYSTFM / PROJECT;: Professiona1 Flight Management (PFM) 

b7E 


8. Access 

a. Describe the means of accessing the system/project and transmitting information to and f rom the system/project; 

b7E 

technicai/securify concerns are resolved, to be accessible across the FBI Net Secret Enclave by all FBI entities with an Aviation Program, 

b. Describe who within the FBI wi II have access to the information i n the system and the controls for ensuri ng that only 

authorized persons can access the information: 

The information in this system is specifically part of the FBI's Aviation Mission and its responsibilities. Those individuals who meet all 

the requirements to maintain their FBINet Secret Enclave user account with a need-to- know and authorized by the Field Flight Operations 

(FED) Unit, A5B, wi! I be granted access to the actual database, b7E 

c. Describe who outside the FBI will have access to the information in the system/project and the controls for ensuringthat 
only authorized persons can access the information: 

This system is nor accessible outside of the FBINet Secret Enclave. This system is only accessible by FBI personnel cleared 
contractors or fTTF, 

7, Does the system/project pertain only to government employees, contractors, or consultants? 

X NO 

_YES. If yes, provide a brief explanation of the quantiry and type of information; 

8, h information about United States citizens or lawfully ad mi tted permanent resident aliens retrieved from the system/project by name 
or other personal identifier? 

NO X YES 


Are Social Security Numbers collected, maintained or disseminated from the system/project? 



Uncias^fied/FOUO 


EPIC-189 





U nclasst fted/FQUO 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAMF OF SYSTEM / PROJECT;: Profession3I Flight Management (PFM) 

X NO 


__ YES. If yes, for systems/'projects ot her t han those su pporting I aw enforcement or i ntel ligenra? acti viti es: 

- What is the purpose for the collection, maintenance or dissernination of SSNs? 

- is it feasible to eliminate SSNs from the system/project (please indicate why or why not}? 

- In light of Federal policy to reduce the use of SSNs, is it feasible to minimize system/project-user access to 
SSNs in t he system/project (why or why not)? 

10. Does the system/projact collect any Information directly from the person who is the subject of the information? 

__ NO 

X _YES, If yes, for systems/pro j ects other than those relating to criminal investigations, CT, or Cl; 

- Indicate how such information is collected; 


Only data related to blE 

- Identify by name and form number any forms used to request such information from the information 
subject (this includes paper or electronic forms): 

No specific forms, recorded in unique electronic data base. 

- Are information subjects from whom information is directly collected provided a written Privacy Act (e)(3) 

statement (either on the col lection form or via a separate notice)? _Yes _________ 

No 


11, Has the system undergone Certification & Accreditation (C&A) by the FBI Security Division (SecD)? 

NO* If no, please indicate reason; if CBi A is pending, provide anticipated completion date; 


This project is currently a part of the FBI Net Secret Enclave; however, the application ! | 

separate G&A, There is no effort to do that at this time or currently required by the Security Divisi on. 


may have to be placed under a 


b7E 


YES. If y es, pi ease: 

- Provide date of fast C&A cer£ification/re-c:ettification: 


Don’t Know 


UndasSfied/FOUO 
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U nclasst fed/FGUG 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAMF OF SYSTEM / PROJECT: Profession;i I Flight Management (PFM) 


12* Is this sy stem/pro jea the subject of an DM8-300 budget submission? 

X NO Don't know 


YES. If yes, if the name of the OMB 300 is not the same as the name of the system/project, please provide OMB 

name: 

13. Is this a national security system (as determined by the SecD)? 

X NO _YES _ Don’t know 

14. Status of System/ Proj ect: 

X This is a new system/ project in development. (Stop. The PTA is now complete and after dtviston 

approval (s) should be submitted to FBI GGC/PCIU for final FBI approval and determination if PI A and/or other 
actions are required.] 

__ This is an existing system/project. [Continue to Section 11 j 


II* EXISTING SYSTEMS / PROJECTS 

1. VVhen was the system/ project developed? 

2, H as the system/pro)ect undergone any signifiesnt changes since Apri \ 17,2003? 

_ NO * If no, proceed to next cj uesti on (11,3), 

YES, If yes, indicate which of the following changes were involved (mark all boxes t hat apply): 

A conversion from paper-based records to an electronic system. 


A change from information in a format that h anonymous or non-identifiahle to a format that is identifiable to 
particular i ndividuals. 


Undas^fied/FOUO 
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U nclasst fied/FGUG 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAMF OF SYSTLM / PROJECT;: Profession3i Flight Management (PFM) 


A new use of an IT system/project, including application of a new technology, that changes how information 
in identifiable form is managed. (For exam pie, a change that would create a more open environment 

and/or avenue for exposure of data that previously did not exist .) 


A change that results in information in identifiable form being merged* centralized* or matched with other 
databases. 


A new method of authenticating the use of and access to information in identifiable form by members of the 


public. 


A systematic incorporation of databases of information in identifiable form purchased or obtained from 
commercial or public sources. 


A new interagency use or shared agency function that results in new uses or exchanges of information in 
identifiable form. 


A change that results in a new use or disclosure of information in identifiable form. 


A change that results in new items of information in identifiable form being added into the system/project. 


__ Changes do not involve a change m the type of records maintained, the individuals on whom records are 
maintained* or the use or dissemination of information from the sysrem/project 

Other, [Please provide brief explanation|: 

3. Does a PI A for this system/project already exist? 


NO 

YES. If yes* please provide date/tide of the Pi A: 


The PTA is now complete and after division approvals} should be submitted to FBI OGC/PCLU for final FBI approval and 
determination if PI A and/or other actions are required * 


U ndas5ified/FOUG 
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ftLL IMfORM&TIGM CaNrTMNlD 

HSBEIM IS DNCLASSIFIED 

DATE 10-31-2014 BY NSICG/C32W33BS1 


(OGC/PCLU (Rev. 04/01 SOI J) 

FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM7 PROJECT: f I b7E 


BIKR FBf Unique Asset ID: NEN-00Q0076 



SYSTEM/PROJECT FOG 

FBI OGC/PCLU FOC 

i €l«l:ied By: 

Name: 

Name;: 


(ITSD)(CON) 

Program Office: Sentinel 

Division: ITED/BES/CMEU 

! (OGO(FBJ) 

Phone: | 

Room Number: 


Phone: 

FBIHQ - JEH - 7350 


Room Number: Sentinel Facility: 

Hernden, VA ! 


FBI DIVISION INTERMEDIATE APPROVALS 



Program J 
executive 

Manager (or other appropriate 
as Division detenuines) 

Division Privacy Officer 

Program Division: 

Case Management 
: Engineering Unit 
(CMEU) 

; Signaturo 
Datg-gigrn 
Nameri" 

[\T£D\ 

Signature: 

Date signed: 

Name: 

Title; 

. | 

(FBI; 

r„ 

TiileF^ 



FBIHQ Division: 
Information 

Technology 

Engineering Division 
(ITEB) Enterprise 
Engineering Section 
(ESS) 

Signature: 
Date si<>ix 
j Name: [_ 

:d: / •* ' V 

im 

ID) (FBI) 

Signature: 

Date signed? 77JJ7ZZW 

Name: 

t itle: unit Chief 


Title: Division Privacy Officer I 


After sit tlsyistBB approvalforward signed hard copy plus electronic copy to FBI OGC/PCLU (JEM 7350). 

(1 he FBI Privacy sad Civil Liberties Officer's determiaatlons, eoaditioas, and/or final .appR>val>|j[|'he i^pjrded' 0 a:tlte 
following page.) 
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FINAL FBI APPROVAL / DETERMINATIONS /CONDITIONS; [This section will be completed by the FBI 
PCLU/PCLO following PTA submission. The PTA drafter should skip to the next page and. continue,] 

VVVVVVWVWVVVVVVVVVVVVVVVVHN.V>V%>VVVVVVVVV>fr>»«*VVWV*/»*^*/»/»/*VVVVS*^^ VVtV*VWVWWVW> 


_PIA is requ ired by the E-OovemmeM Act. 

_PIA is to he. completed as a matter of FBI/DQJ discretion. 

is PiA to be published on FBi.GOV (after arty RMD F01A redactions)?_ Yes._No (indicate reason): 


X_PIA is not required for the following mi$on(S); 

X System does sot collect, maintain* or disseminate Pil. 

.••vw . . •''•••’ . • •• ■ • ■ : • xvXvXvS*:. 

_______ System is grandfathered (in existence before 4/17/2003; no later changes posing significant privacy's 

information in the system relates to internal government operations, 

_____ System has been previously assessed under an evaluation similar to a PIA, 

_X__No significant privacy issues (or privacy issues are unchanged). 

Other (describe): 


Applicable; SORN(s): N/A 

Notify FBI RMD/R1DS per M10G 190,2.3? X Ho Yes-See st; 

| hPpsPhome/DO/OGC/LTB/PCiAl/Prlv&eyibviPdlOybeitiesNGQUbrary 

SORN7SORN revision(s) required? __X.No _Yes (indicate revisi 

tmple EC on FCLU intranet website here: i 
/form__fer_ miogi 90--2-3_ee,wgd ! 

oss needed): | 

Frepare/reviseMd Privacy Act (e)(3) statements for related forms? X No _Yes (indicate forms affected): j 

RECORDS. The program should consult with RMD to identify/resolve any Federal rocords/eteetronk records issues. 

The system may contain Federal records whether or not it contains Privacy Act requests and, in any event, a records 
schedule approved by the National Archi ves and Records -Administration is necessary-. RMD can provide advice on this 
as well as on compliance with requirements lor Electronic Recordkeeping Certification and: any necessary updates. | 

Other; 


i 

I \i)mt Chief | Signature ;| 

Privacy and Civil Liberties Unit 1 Date Signed] 

FBI Privacy and Civil Liberties Officer | /T / 
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I. INFORMATION ABOUT THE SYSTEM / PROJECT 

L Provide a general description of the system or project that includes: (a) name of 
the system/project, including associated acronyms; (b) structure of the 
system/project, including interconnections with other projects or systems; (e) 
purpose of the system/project; (d) nature of the information in the system/project 
and how it wilt be used; (e) who will have access to the information in the 
system/project; (f) and the manner of transmission to ail users. (This kind of 
Information may he available in the System Security Plan, if/available, dr .from, a Concept 
of Operations document, and can he cut and pasted here.); 




|are FBI personnel and' contracted To facilitate 
user-to-oser comniunications their lull names are stored on the system. but no other data 
about users is collected, stored or maintained on the system. 
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2, Does the system/project collect, maintain, or disseminate any information about 
individuals (i.e,, a human being or natural person, regardless of nationality)? 

X NO |If no, STOP, The FTA is now complete and after division approval(s) 

should he submitted to FBI OGC2FCLIJ for final FBI approval, Oates yon are 
Otherwise advised, no PI A is required,] 

* Other than the col lection of names o f employees and contractors who have acce ss to 
the system, the system does not collect, maintain, or disseminate any information 
about individuals, 

_YES {If yes, please continue.] 

3, Please indicate if any of the following characteristics apply to the information in the 
system about individuals; Bear in mind that log-on information may identity or be 
linkable to an individual. 

(Check all that apply,) 

_The information directly identifies specibe Individuals, 

The infonnation is intended to be used, in conjunction with other data elements, 
to indirectly identify specific individuals. 

______ The information can be used to distinguish or trace air individual's identity (i.e., it 

is linked or linkable to specific individuals). 

If you marked any of the above, proceed to Question 4. 

* _ Hone of the above. If none of the above, descri be why the information does not 

identity specific individuals either directly or indirectly, {If you cheeked this item, 
STOP here after providing the requested description,] 

4, Does the system/project pertain only to government employees, contractors, or 
consultants? 

_NO YES 


5. Is; information about United States citizens or lawfully admitted permanent resident 
aliens retrieved from the system/project by name or other personal identifier? 

_NO. 11 f no, skip to question 7,j 

YES. {If yes, proceed to the nest question,] 

6. Does the system/project co!ject any information directly from the person who is the 
subject of the information? 
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_NO [If no, proceed to question 7,| 

........ YES 

a. Does the system/projeel support criminal, Cl', or FC! investigations or 
assessments? 

_NO 

_YES [If yes, proceed to question 7,| 

b. Are subjects of information item whom the information is directly collected 
provided a written Privacy Act (e)(3) statement (either on the collection form or via a 
separate notice)? 

NO [The program will need to work with PCLU to develop/implemeht 
the necessary forra(s).| 

_YES Identify any forms, paper or electronic, used to request such 

information from the information subject; 

7, Are Social Security Numbers (SSNs) collected, maintained or disseminated front the 
system/project? Full SSNs should only be used as identifiers in limited instances. 

_NO __ YES If yes, check all that apply : 

_ SSNs are necessary to establish/confirm the identity of subjects, victims, 
witnesses or sources in this law enforcement or intelligence activity. 

_ SSNs are necessary to identify FBI personnel in this internal administrative 

system. 

_SSNs are important for other reasons. Describe: 

_The system/projeet provides special protection to SSNs (e.g„ SSNs are 

encrypted, bidden from all users via a look-up table, or only available to certain 
users). Describe: 

It is not feasible Ibr the system/project to provide special protection to 
SSNs. Explain: 
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8. Is the system operated by a contractor? 

_No. 

_Yes. Information systems operated by contractors for the FBI may be 

considered Pri vacy Act systems of records . The Federal Acquisition Regulation 
contains standardcontract clauses that must be included in the event the system 
collects, maintains or disseminates PII and additional requirements may be 
imposed as a matter of Department of justice policy. Consultations with the 
Office of the General Counsel may be recjuired if a contractor is operating the 
system for the FBI. 

9, l ias the system undergone Certification & Accreditation (C&A) by the FB I 
Security Division. (SecD)? 

_____ NO If no, indicate reason; ifC&A is pending, provide anticipated 
completion date: 

_YES If yes, please indicate the following, if known: 

Provide date of last C&A certification/re-certification: 
Confidentiality;pDow .. Moderate High Undefined 

Integrity: Low Moderate High Undefined 

Availability: _Low Moderate High Undefined 

_Not applicable - this system is only paper-based. 
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10. Does the system conduct data mining as defined in Section 804 of the 
Implementing Recommendations ofthe 9/11 Commission Act of 2007. P.L. 1 JO- 
53 (codified at 42 U SC 20(X)ee-3)'? 

MO 

.YES If yes, please describe the data mining function: 

11. Is this a national security system (as determined by the SecD)? 

_NO _YES 

12. Status of System/ Project: 

_ This is a new system/ project in development. | If yon checked this block, 

STOP. The FT A is now complete and after division approval(s) should he 
submitted to FBI OCiC/PCLli for final FBI approval and determination If 
FI.4 and/or other actions are required.] 


II. EXISTING SYSTEMS / PROJECTS 

1, When was die sy siem/proj ee 1 de v el oped? 

2. Has tlte system/projeei undergone any significant changes since April 17.2003? 

_ HO ptno, proceed to next tjuesfiou (If 3 j.] 

_YES If yes. indicate which ofthe following changes were involved (mark alt 

changes that apply, and provide brief explanation for each marked change): 

A conversion from paper-based records to an electronic system. 

_A change from information in a format that is anonymous or non- 

identifiable to a format that is identifiable to particular individuals. 

_A new use of an IT system/project, including application of a new 

technology, that changes how information in identifiable form is managed, 
(For example, a change that would create a more open environment and/or 
avenue for exposure of data that previously did not exist) 

_ A change that results in information in identifiable form being 

merged, centralized, or matched with other databases, 
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_____ A new method of authenticating the use of and access to 
information in identifiable form by members of the public. 

_ A systematic incorporation of databases of information in 

identifiable form purchased or obtained from commercial or public sources. 

A new interagency use or shared agency function that results in 
new uses or exchanges of information in identifiable form. 

_ A change that resul ts in a new use or disclosure of information in 

identifiable form. 

_. A change that results in new items of information in identifiable 

form being added into the system/projeet. 

_ Changes do not involve a change in the ty pe of records maintained^ 

the individuals on whom records are maintained, or the use or 
disseminafion of information from the system/proj ect. 

Other [Provide brief explanation): 

3. Does a PI A for this system/projeet already exist? 

___NO .. .. YES 

If yes: 

a. Provide date/title of the PI A: 

b. lias the system/projeet undergone any significant changes since the Pi A? 

_NG YES 

fTheFIA is now complete and after division approvals) should he submitted to 
FBI OGC/PCLU for final FBI approval and determination If PI A and/or other 
actions are required,] 
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L INFORMATION ABOUT TEE SYSTEM / PROJECT 


1-Ot' VS i"W >; i-l,p. S.v a".v^*. *.\ ,.<OX'•.X.,.-:x:-g i 4C:Jy!vi vVvi X-,i-. ,.■ .<.>>>'%•: 

i»eMiag BE.«repia«ciJ0»s wife Tier projects or systems; «) 
purpose of fee syvbwi/p refect:: (dj ooittreoffhe feferonrfeto In fee rystem/frojed 
and hew ft will lie used; (e| who will haveooeees la lie Ihteoaiiife In fee 
if ileai/pri|efep (i) and. fee t»n:ner of transmission to all o«s< 

Ffevtsiohinc toi Access CmArol IRAQ Svafem 


The Idferroatfen J eehrtofegy Branch's Implementation of fee ftmvisiorfeig and Access 
Ckmtrol (PAR) system will ftdftft an immediate need to medenfem sea expedite access 
processes across fee orgardeotron, Central to these erferfn Is fee ndlm&a of a. pdfekty 
teehrmiogy loot (Qrtfeld IhetfefeElsii.sgcr Ssltc)ssfeeh feelfeer seeesotiopmsosoofe 
solutions to aOemolovess no matter where they are located, amvldaw ’tone-Top 

IV i v A> rT> U Tvs *T;> v* 


The overall obfeettvf of FAC is to provide ati enterprise level Mefeifetosoagstoopl 
so lotion for fee Fill. To address fels complex endeavor, fee ITS has developed an 
fenremeota! strategy feat Involves tbs execution of fedi vidua! task orders. The initial task 
order will establish a femtdahQoal Identity management dnntcwork to support fee 
capability to pswdsiotrfeemrovtxieo basic access privileges wife ftferre task orders 

j v> .'X w ^V,"A > JA-JN .'> ,'\,4 w.-x -fXW ; > V V f? .Ox-V \ fexs' 'XA .-X-XX .'VV .-X-J-N WV>WN O- >:di \ V >,v> 

i.VVvfe;,dd vRx UxV V.vV.vV <JV V xvwt.Ui <>x xVVVVvV X >X A: Wxto :Exfe AO :U- vW V > 0 - vAstAx k ,:.>'x rivtOVjk 

v.v .' V- - 

(FBIBBT), The FBI plans to execute nddfeooal task orders to imglernent fee sbvsceed 
capabilities oner fee neat couple of poors pending availability of fending, Additional 
privacy documentation will be prepared as necessary 


is fee Initial feek order, Oracle Identity Manager (DIM) will ffetoion as a backend 
seryleodhat will lolerfkcg wife. the main thane to allow tor a self-service mafeffaore 

Is currently a manna! process that mast he 
perfdwned by fee Enterprise Operctions Confer {B0C| help desk admlrbafrator. Also, as 
part of fee ilrst task order, RAC w!E interface wi.it. few Efeerprlse Fmcoss Autotnatfan 
System (IFAS) to receive those Scopr|ty .Aecess Kegoest (S AF) provisioning tickets 
specifically lor access to the core set of systems and appileadens far all new employees. 
Once: FAC receives the EAR tickets, E will automate fee provisioning proeess to esfeMM 

f *A? 'Z 'i dsT *>wO; gi A -\f' >c ; A 

• ; >y\>VV vX\ AVAN .-. ,v.> V ->.y\v v> v.-.va .Vj.- .\>^\ vA.\y .'.vaava • '*• V >• J.vb.Wt X Xt>:«Xj. V X WVW/fei.vM \.>{xW VTvxVi,' W v v.xy.v.x v.w.'C w 

fee Boroaa. 1c provide the core I'f system components, fee FAC system, will iptortace 
wife the following systems and applications: EDS, Microsoft Active Directory, Microsoft 
Exchange, Microsoft Office Commnmcatfens Server. Webl'A, Mieroroft 
SharePoint/bfvSItc and add Oner Borne Drive. Chico the FAC S vs tern is duly 


IJfeCii.AbdlfiEI) 
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GAciAssiFfiD 


o Mainframe 

* F’lO Shadow Directory 

* Active Directory (AD) 

* Microsoft Exchange 

* Microsoft Office Clotrprmuleaiiunis Server 

* WebTA 

^ Sr C >. Ox .\v S: S,' O0 .\VC 


requiring access. Supervisory personnel (Andu-riteuve llseub mi system adfniBtstrs 
will have role-based sutbority to approve access requests sod ooobiorscsteo'i 





la uddiborg all users will fee able to utilise. a. self-sendee mierfaee to 
request access to desired applications and specific sofbvare paetagew and aabsequeufly 
track Ibs status of those requests online, 

x v x PxPikilxA Sx$pG'PxPl: Fo:£. pi vdibOP'wFA V tOD*>^txA.vW\tf.vCv- kq;vkiw.v)AAkvit\\.\vk ly'.i.v y V's’a.vJ P\v JU'AvPOPO- p A:' -C dxFA>v: •'•£>- 

<\yAw:'.^‘V•'>\-;A :* >X'■ttXJwv \ s-wdp §*•?:< ,4? for a < jx > < x?: <«• :%» '/S-jS.^X V ^ 

VJX x.Vss-X <v\oa v w;i:*Sw: •:■;<■ vV X >;•$;{ W>>--:': sx.x x x;:t v kxv^wA wW: x x 

application or sysiebi Pfl contained Ib tike- Bureau Fewormel Manageoreot Syste# : 
£BFM$> will bo Imported to FAC to facilitate processing access repeeefw. Ffi. contained 1 

lSt§. £bCxC..':: l,Ov. Lx$£xt:$: Xx A*0 V? < v5>x^C* x<Nvi 

cumber (SSIGg which is the umverso! idfemifmriu BFM8. ODcr tban the hBopnaliou 
necessary to complete a ageeillc task, sued as the proposed userA name., uo other FII will 


: x/i v - ^ v> ^’y>. *|xvN yj'^xx ,' < >>4j: >x x^w>. >'•»>« ; > xw'F ?C?x AAv v --\x J.\ .<x%y-: ^$x.»x->\ •'-< y^rV>AA'v''D : VO‘ 

vv YAMxxG-.. U*v ixAvD '' tVJVsk 1 - SCV|wxC'v.i.ix<^ G£4C' X VAJ :AVAG A Ax* IJtiw&f UvJ.tvl {.\pubv>.-.:^ 

authority, no other users of the sysietu will bo able to see any FII relating to any other 
usee FAC user screens wilt not display user SSNs. SSNs are used by FAC outy for 
electronic match! Bg of access records in the various FBI systems that currently still use. 

SSH as rue primary wteoitt.tor, fate vreg rorwang o is expeet.su map svbereuer posanae. 
other less sensitive: aftribufsA sued as the FBI unique IDywIll be used to. roaunam these 


y> 

y 

r 

y< 

/X 

sCdc |u the Distributed A 


■issums pin 

Wical ssourity cons munis 

acilvitioA c; 

uiduoted whi-ie tbs FAG 


< V* i bet p> ) <:•;• < •:•' :V* .-n t Ft >'V ; A f-' A S > 0>..-x :■.; yx'vvxy* v s. > .* vj :-\ '>>-.\-\ v ;-f wcvd O .:ppnyy ; ft bjw 

v.NXv..v.Xy.-. xXS x. . \V-' - O •: ><„ X-<\ u<,...; s .- ;.,/v;t svXsXs v\ .< \ ; X X^.'XXs .v w\.'\.P t-sXX>W vv.^Jav>,w,}...v,v.-.v t.'.v 

reflect who has access to wdat systems and how that access was erented- 




'? y S' ‘^ 'f j 'f F F ?)' :C* xSA'F v Fvb C'' c\y- •:>:■: ;0 VIS •' vc> F'Wyt'W; tv Fryyox; 











_ ^ YES pf ye% please zmihme<l 

5 . Please iodkaie if am? of ike folloydag ckereelemtks sgplj'k dm iokmeiie.a m tk 
system akok kbividuak: Bear k ?ii«d that log-mo itdormadoo rosy ideodty $F Ee 
IjikaMe id ee iadkidaaL 
(Chock si! that apply.) 

X The Mofm&feri directly identifies; specific rndiCduafs. 




w* T}v a ^vV^Vvi-yV^^t'irt^ ?<v >‘-?n$£*■ 4 K<n >U s Xn 4 *>•«• ^>x.*v: s<\> < ^;xri < Cl^y*>**T ktoSlX: ■>, 

A A W AxJ.^-.U'X<*t>:>;\':i ':*'*> :«;XXx><yVO\XX-'-\*- V.XV a-NX^vX .Vy i.u vv^ w;<:vp v>y v\ ,WA w.mX-« \>.yv..,.y.. A.yV -vXaa.a x y 

: : >m*. x-i-n .*X y -xoNv vS \ >:> •{.■■?.«•>*•; J 5 r>x :o v vc>;p-> y*i>:•:•*> <vw|W^i:i-:*s io 

yv,\ . :v s < }\}.i.'.\.\' v' V .Vv,<>v-v,\va a V OfV v/va aS,-: a i.yl.y.'. V J\.\\X<av^' . 


X The iofbtmadeii ego be ased to dklinguisb or trace an kdivicfoaik kieodiy pA, 
k li.ok.ed or liekaMe to spesilk EidivMusIs). 

If ytm marked ady of ike above, prereed to Qnmtkm 4, 

__ More ofike skom If ooms of ike akoye, deserike oaky ike ioionnahon does art 

y vAxy-sy }'\fyx •y\v\-.xr•*•."> >:-yv<**k-vc 5 , 4 ;\' a£:>? i fy \*x^- x< y<;•* H'Jx^ 

x V v^^V’X. |..vV vaXvXv V y\J;^\v.\w a\ .\ KvXwa v Y* J,X\.yi .\ vV‘vi y < X \,'\>v v i *v\' N \vvvv*^ *' AV >* vVc-v^yV.;. 

S,> >.. x-?.v? .vxfev Xv .■:<:c,>.-„-i : ; .oX >*r-V$\cA-x*ji^ : <v>xxs s.Xs-Xvx.l: v l>xox y£xXXxcx::%| 


4 * Dose ike eysiosikpt^eei pertain aply to 


NO 


X YES 




S, Is iplosaiaiiop: aboor United Stake clilaas; or lakroily akkilod psrmmmt msMmi 
abacs kideyod from ilk systero?pro|eei ky name of odkir persoae I ideoEfierf 

MCk pf see, skip to goesEon ?.,) 

X YES. flfyes* pf oread kike oenlgbeattomf 

Ilk klofoiadeo aboaf individuals eotPaiked within FAC wiltpedain orby m FBI 

|x>Xx'i.S^x % Sx5^. '^xilid.y^x.vtxxY:: IXlSviv. >1? 3?$0 i &xA?Ty Hi : x : : X•:•&:: C‘0 klv ;:a\oX-v' > 'x. >. 

■:>V'V<-v.;X' \'.vj : \ C;X> x'\ fN:'•••;x .'Nx'->: n y < p> .;\ >' ' 
l'X-< v>Vi k vX\X :<>■ .vX i i.' V V--VXi v JX Xvyx.->X: Xv.s ...X X kXy.- . 


!•;..; • . y.v* „■ \y.\K ■: : y,\vt« 

'X\Y > |x 


N •;: \-.'.•■••X'x<>*>\ XyM vX.'Xf. 
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X lit 


YBS (If.ye% proceed to sprstion' 


b. Am mbjscla-ef kifbm?Mioa 1mm whom the la&matioa is directly collected 
provided a write Privacy Act (e)(3) statement (either nn the collection faxrn or via & 
eepamte notice)? 

.NO |Tbe program will need to work with FCLU to develop/lmplcsnent 

tie rmeesssry ib:rmfy)vj 

X.YXS Identify my fimm? paper or electronic mod to retpest soeh 

Information Ikom the Information sobjeet: 



.•V.-x.-N, .<■' .•} \'N ;: : J -f\ *'’5 •■*> v' yy v" 

002» o4 ys&. aas&. /•idbX 

% Are Social Security Ntmobem (SSMa) collected* maintained or disseminated from the 
sveimn/prqieet? Foil SSMe sbooM only be used as: idenilSere in limited instances, 

.NO X.YES If yes, check all that apply: 

_SSNs ate neec&sary to establisb/eonttrm the identity of subjects* victims* 

witnesses or sources in this law ardbmement or intelligence activity. 

Nc;>:vn- v\,'\;>/X vv-n:'>%•'•'>:.> •;■:* A.^vXvyi-A j;, v) % \'\\‘\\v.v.‘WA%A>i vv% F:\vb •••.'■siS.>>.vJ'v\ 
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*.*> h-!V x\XvN V*AA$ Ov* iiMfcii AAC>A>A i>5V Uvvv J\* VVXt.VA xi.^Axsi >-A 

y AAAV \S:j I: ''s|'c\-\ »-j.v> xvty c >x x>a*->\* wc-4 

x i AV UV:sa Av A AA ■iVww ?AV v.vivxA y AAv.w\Ja 


.It is not feasible tor the system/prolsct to provide speck! protection to 

hots a.. Glue wot 


it Is the system operated by a contract®?! 


N:<n 
,:•• A \t> 


1_...X..... Yes. Infbrmhfea systems operated by eoutrsetors .for lire FM tneybe 
considered Privacy Act systems of records. The Federal Acquisition Regulation 

>*>.?'Ayyt■»>; ;■ \ v ve <'P;> v\."v ‘> vy^ .' V >’Xy< $•>■■ y vVyc>.-x-'v■: y?\o>Sf: >\-x>x^>A- l\.\\ >:s*>a s :- «: tx.'A.xxx \ y; ?' Jvcx ;x• scxS'Vv ^yv<N lyyoSvNAyi 
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